Exploit / PoCcriticalExploited in the wild

CISA Flags 8 Actively Exploited Flaws in Samsung and D

The Hacker Newsby @TheHackersNewsJul 3, 2023 · 10:48 UTC (Jul 3, 2023)2 min read1

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-25394 CVE-2021-25395 CVE-2021-25371 CVE-2021-25372 CVE-2021-25487 CVE-2021-25489 CVE-2019-17621 CVE-2019-20500

Tags: cve-2021-25394 cve-2021-25395 cve-2021-25371 cve-2021-25372 cve-2021-25487 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-17621	Unauthenticated Root Command Injection in D-Link DIR-859 Router UPnP	9.8	91%	KEVPoC ×2	Dec 30, 2019 KEV Jun 29, 2023
CVE-2019-20500	Authenticated OS Command Injection in D-Link DWL-2600AP Access Point Web Interface	7.8	97%	KEVPoC	Mar 5, 2020 KEV Jun 29, 2023
CVE-2021-25372 +1 related CVE CVE-2021-25371	Out-of-Bounds Memory Access in Samsung Android DSP Driver	6.7	<1%	KEV	Mar 26, 2021 KEV Jun 29, 2023
CVE-2021-25394 +1 related CVE CVE-2021-25395	Use-After-Free Race Condition in Samsung Mobile MFC Charger Driver	6.4	<1%	KEV	Jun 11, 2021 KEV Jun 29, 2023
CVE-2021-25487 +1 related CVE CVE-2021-25489	Out-of-Bounds Read in Samsung Modem Interface Driver Enables Arbitrary Code Execution	7.8 group max	<1%	KEV	Oct 6, 2021 KEV Jun 29, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jul 03, 2023 Mobile Security / Network Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has placed a set of eight flaws to the Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.