Vulnerabilidades exploradas (CISA KEV)

CVE-2023-20963 Alta · 7.8 KEV Alta · 58 Exploit público CWE-295 24/03/2023

Android Framework Privilege Escalation Vulnerability

In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-220302519

CVE-2022-42948 Crítica · 9.8 KEV Alta · 61 CWE-116 24/03/2023

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.

CVE-2023-26360 Alta · 8.6 KEV Urgente · 79 Exploit público CWE-284 23/03/2023

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

CVE-2023-26359 Crítica · 9.8 KEV Alta · 63 CWE-502 23/03/2023

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

CVE-2023-28432 Alta · 7.5 KEV Urgente · 79 Exploit público CWE-200 22/03/2023

MinIO Information Disclosure Vulnerability

Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z.

CVE-2023-28434 Alta · 8.8 KEV Alta · 61 Exploit público CWE-269 22/03/2023

Bypass de Gerenciamento de Privilégios no MinIO (PostPolicyBucket)

Minio é um framework de armazenamento de objetos multi-nuvem. Antes de RELEASE.2023-03-20T20-16-18Z, um atacante pode usar requisições elaboradas para contornar a verificação de nome de bucket nos metadados e inserir um objeto em qualquer bucket durante o processamento de `PostPolicyBucket`. Para executar esse ataque, o atacante precisa de credenciais com a permissão `arn:aws:s3:::*`, além de acesso à API do Console habilitado. Este problema foi corrigido em RELEASE.2023-03-20T20-16-18Z. Como solução alternativa, habilite o acesso à API do navegador e desative `MINIO_BROWSER=off`.

CVE-2023-0386 Alta · 7.8 KEV Urgente · 73 Exploit público CWE-282 22/03/2023

Linux Kernel Improper Ownership Management Vulnerability

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalate their privileges on the system.

CVE-2023-25280 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-78 15/03/2023

D-Link DIR-820 Router OS Command Injection Vulnerability

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

CVE-2023-28461 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-287 15/03/2023

Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09 vendor advisory stated "a new Array AG release with the fix will be available soon."

CVE-2023-1389 Alta · 8.8 KEV Urgente · 77 Exploit público CWE-77 15/03/2023

TP-Link Archer AX-21 Command Injection Vulnerability

TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before being used in a call to popen(), allowing an unauthenticated attacker to inject commands, which would be run as root, with a simple POST request.

CVE-2023-24880 Média · 4.4 KEV Alta · 63 Ransomware CWE-863 14/03/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-23397 Crítica · 9.8 KEV Alta · 66 Exploit público CWE-294 14/03/2023

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

CVE-2023-27532 Alta · 7.5 KEV Urgente · 75 Exploit público Ransomware CWE-306 10/03/2023

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

CVE-2022-41328 Alta · 7.1 KEV Alta · 65 CWE-22 07/03/2023

Fortinet FortiOS Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.

CVE-2019-8720 Alta · 8.8 KEV Alta · 52 CWE-119 06/03/2023

WebKitGTK Memory Corruption Vulnerability

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.