[ad_1]
This week, the Cybersecurity and Infrastructure Safety Company (CISA) added seventeen actively exploited vulnerabilities to the ‘Recognized Exploited Vulnerabilities Catalog.
The ‘Recognized Exploited Vulnerabilities Catalog’ is a listing of vulnerabilities which have been seen abused by risk actors in assaults and which might be required to be patched by Federal Civilian Govt Department (FCEB) companies.
“Binding Operational Directive (BOD) 22-01: Decreasing the Important Danger of Recognized Exploited Vulnerabilities established the Recognized Exploited Vulnerabilities Catalog as a dwelling record of recognized CVEs that carry important threat to the federal enterprise,” explains CISA.
“BOD 22-01 requires FCEB companies to remediate recognized vulnerabilities by the due date to guard FCEB networks towards energetic threats. See the BOD 22-01 Truth Sheet for extra data.”
The vulnerabilities listed within the catalog enable risk actors to carry out quite a lot of assaults, together with stealing credentials, getting access to networks, remotely executing instructions, downloading and executing malware, or stealing data from gadgets.
With the addition of those 17 vulnerabilities, the catalog now comprises a complete of 341 vulnerabilities and contains the date by which companies should apply safety updates to resolve the bug.
The seventeen new vulnerabilities added this week are listed beneath, with CISA requiring 10 of them to be patched inside the first week of February.
| CVE Quantity | CVE Title | Required Motion Due Date |
| CVE-2021-32648 | October CMS Improper Authentication | 2/1/2022 |
| CVE-2021-21315 | System Info Library for node.js Command Injection Vulnerability | 2/1/2022 |
| CVE-2021-21975 | Server Aspect Request Forgery in vRealize Operations Supervisor API Vulnerability | 2/1/2022 |
| CVE-2021-22991 | BIG-IP Visitors Microkernel Buffer Overflow Vulnerability | 2/1/2022 |
| CVE-2021-25296 | Nagios XI OS Command Injection Vulnerability | 2/1/2022 |
| CVE-2021-25297 | Nagios XI OS Command Injection Vulnerability | 2/1/2022 |
| CVE-2021-25298 | Nagios XI OS Command Injection Vulnerability | 2/1/2022 |
| CVE-2021-33766 | Microsoft Change Server Info Disclosure Vulnerability | 2/1/2022 |
| CVE-2021-40870 | Aviatrix Controller Unrestricted Add of File Vulnerability | 2/1/2022 |
| CVE-2021-35247 | SolarWinds Serv-U Improper Enter Validation Vulnerability | 02/04/2022 |
| CVE-2020-11978 | Apache Airflow Command Injection Vulnerability | 7/18/2022 |
| CVE-2020-13671 | Drupal Core Unrestricted Add of File Vulnerability | 7/18/2022 |
| CVE-2020-13927 | Apache Airflow Experimental API Authentication Bypass Vulnerability | 7/18/2022 |
| CVE-2020-14864 | Oracle Company Enterprise Intelligence Enterprise Version Path Traversal Vulnerability | 7/18/2022 |
| CVE-2006-1547 | Apache Struts 1 ActionForm Denial of Service Vulnerability | 07/21/2022 |
| CVE-2012-0391 | Apache Struts 2 Improper Enter Validation Vulnerability | 07/21/2022 |
| CVE-2018-8453 | Microsoft Home windows Win32k Privilege Escalation Vulnerability | 07/21/2022 |
Of specific curiosity are the CVE-2021-32648 and CVE-2021-35247 vulnerabilities, which had been disclosed this week to be actively exploited in assaults.
The ‘October CMS Improper Authentication’ vulnerability tracked as CVE-2021-32648 should be patched by February 1st, 2022, attributable to its current use to hack and deface Ukrainian authorities web sites.
Whereas Ukraine blames these assaults on Russia, some safety specialists attribute the assaults to a Belarus-tied hacking group generally known as Ghostwriter.
The brand new ‘SolarWinds Serv-U Improper Enter Validation’ vulnerability tracked as CVE-2021-35247 was found by Microsoft to be exploited to propagate Log4j assaults to Home windows area controllers configured as LDAP servers.
Whereas assaults utilizing the Serv-U vulnerability finally failed, as Home windows area controllers are usually not weak to Log4j exploits, CISA requires companies to repair the vulnerability by February 4th, 2022.
It’s strongly beneficial that every one safety professionals and admins evaluation the Recognized Exploited Vulnerabilities Catalog and patch any inside their setting.
[ad_2]
