Network Security Trends: August
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-24499 | The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or… | 9.8 | 60% | PoC ×2 | |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-32789 | woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks | 7.5 | 17% | ||
| CVE-2021-33357 | A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the "iface" parameter value contains… | 9.8 | 17% | PoC | |
CVE-2021-34473+1 related CVE | SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell) | 9.1 group max | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-35395 | Multiple Stack Buffer Overflows and Command Injection in Realtek Jungle SDK Web Server | 9.8 | 98% | KEVPoC | KEV |
| CVE-2021-38647 | Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI) | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-40438 | Server-Side Request Forgery (SSRF) in Apache HTTP Server mod_proxy | 9.0 | 100% | KEVRansomware | KEV |
| CVE-2021-40870 | Unauthenticated File-Upload RCE via Path Traversal in Aviatrix Controller 6.x | 9.8 | 93% | KEVPoC ×2 | KEV |
| CVE-2021-41773 | Path Traversal to RCE in Apache HTTP Server 2.4.49 | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
| CVE-2021-42013 | Path Traversal and RCE in Apache HTTP Server (follow-up to CVE-2021-41773) | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
From the original article
9 min read at unit42.paloaltonetworks.com
Unit 42 researchers continually observe network attacks and search for insights that can assist defenders. Here, we summarize key trends from August-October 2021. In the following sections, we present our analysis of the most recently published vulnerabilities, including the severity distribution.
By Yue Guan · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.