CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-3904 | Local Privilege Escalation in Linux Kernel RDS Implementation | — | 16% | KEV | — KEV |
| CVE-2014-0196 | Race Condition in Linux Kernel TTY (n_tty_write) Allows Local Privilege Escalation | — | 20% | KEV | — KEV |
| CVE-2015-5317 | Information Disclosure in Jenkins UI Exposes Restricted Job and Build Names | — | 23% | KEV | — KEV |
| CVE-2016-3427 | Improper Access Control in Oracle Java SE and JRockit JMX Exploited in the Wild | 9.8 | 92% | KEV | KEV |
| CVE-2016-8735 | Unauthenticated RCE in Apache Tomcat via JmxRemoteLifecycleListener | 9.8 | 90% | KEV | KEV |
| CVE-2021-3560 | Incorrect Authorization in Red Hat Polkit Allows Local Privilege Escalation | 7.8 | 24% | KEVPoC | KEV |
| CVE-2023-25717 | Unauthenticated RCE via Command Injection in Ruckus Wireless Admin ≤10.4 | 9.8 | 98% | KEVPoC | KEV |
From the original article
3 min read at securityaffairs.com
US Cybersecurity and Infrastructure Security Agency (CISA) added seven new flaws to its Known Exploited Vulnerabilities catalog. U. S.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.