CISA Known Exploited Vulnerabilities

This dashboard displays the latest vulnerabilities published by the Cybersecurity & Infrastructure Security Agency (CISA).

CVE-2020-2509

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

Vendor: QNAP

Product: QNAP Network-Attached Storage (NAS)

Added: 2022-04-11

Due Date: 2022-05-02

Description:

QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-77 CWE-78

CVE-2017-11317

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

Vendor: Telerik

Product: User Interface (UI) for ASP.NET AJAX

Added: 2022-04-11

Due Date: 2022-05-02

Description:

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-326

CVE-2021-3156

Sudo Heap-Based Buffer Overflow Vulnerability

Vendor: Sudo

Product: Sudo

Added: 2022-04-06

Due Date: 2022-04-27

Description:

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-122 CWE-193

CVE-2021-31166

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

Vendor: Microsoft

Product: HTTP Protocol Stack

Added: 2022-04-06

Due Date: 2022-04-27

Description:

Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-416

CVE-2017-0148

Ransomware

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Vendor: Microsoft

Product: SMBv1 server

Added: 2022-04-06

Due Date: 2022-04-27

Description:

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-20

CVE-2022-22965

Spring Framework JDK 9+ Remote Code Execution Vulnerability

Vendor: VMware

Product: Spring Framework

Added: 2022-04-04

Due Date: 2022-04-25

Description:

Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-94

CVE-2022-22675

Apple macOS Out-of-Bounds Write Vulnerability

Vendor: Apple

Product: macOS

Added: 2022-04-04

Due Date: 2022-04-25

Description:

macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-20 CWE-125

CVE-2022-22674

Apple macOS Out-of-Bounds Read Vulnerability

Vendor: Apple

Product: macOS

Added: 2022-04-04

Due Date: 2022-04-25

Description:

macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-20 CWE-125

CVE-2021-45382

D-Link Multiple Routers Remote Code Execution Vulnerability

Vendor: D-Link

Product: Multiple Routers

Added: 2022-04-04

Due Date: 2022-04-25

Description:

A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.

Required Action:

The impacted product is end-of-life and should be disconnected if still in use.

CWEs:

CWE-78

CVE-2022-26871

Trend Micro Apex Central Arbitrary File Upload Vulnerability

Vendor: Trend Micro

Product: Apex Central

Added: 2022-03-31

Due Date: 2022-04-21

Description:

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-184

CVE-2022-1040

Sophos Firewall Authentication Bypass Vulnerability

Vendor: Sophos

Product: Firewall

Added: 2022-03-31

Due Date: 2022-04-21

Description:

An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-158

CVE-2021-34484

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Vendor: Microsoft

Product: Windows

Added: 2022-03-31

Due Date: 2022-04-21

Description:

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-269

CVE-2021-28799

Ransomware

QNAP NAS Improper Authorization Vulnerability

Vendor: QNAP

Product: Network Attached Storage (NAS)

Added: 2022-03-31

Due Date: 2022-04-21

Description:

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-285

CVE-2021-21551

Dell dbutil Driver Insufficient Access Control Vulnerability

Vendor: Dell

Product: dbutil Driver

Added: 2022-03-31

Due Date: 2022-04-21

Description:

Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.

Required Action:

Apply updates per vendor instructions.

CWEs:

CWE-782

CVE-2018-10562

Ransomware

Dasan GPON Routers Command Injection Vulnerability

Vendor: Dasan

Product: Gigabit Passive Optical Network (GPON) Routers

Added: 2022-03-31

Due Date: 2022-04-21

Description:

Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.

Required Action:

The impacted product is end-of-life and should be disconnected if still in use.

CWEs:

CWE-78