Exploited vulnerabilities (CISA KEV)

CVE-2021-4034 High · 7.8 KEV Urgent · 86 Public exploit Ransomware CWE-125 Jan 28, 2022

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

CVE-2021-40407 High · 7.2 KEV High · 56 CWE-78 Jan 28, 2022

Reolink RLC-410W IP Camera OS Command Injection Vulnerability

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This would lead to an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.

CVE-2021-22600 High · 7.0 KEV High · 61 Public exploit CWE-415 Jan 26, 2022

Linux Kernel Privilege Escalation Vulnerability

A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755

CVE-2021-35587 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-306 Jan 19, 2022

Oracle Fusion Middleware Unspecified Vulnerability

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2022-23227 Critical · 9.8 KEV High · 63 CWE-306 Jan 14, 2022

NUUO NVRmini2 Devices Missing Authentication Vulnerability

NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.

CVE-2022-23134 Medium · 5.3 KEV High · 63 Public exploit CWE-287 Jan 13, 2022

Zabbix Frontend Improper Access Control Vulnerability

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

CVE-2022-23131 Critical · 9.8 KEV Urgent · 73 Public exploit CWE-290 Jan 13, 2022

Zabbix Frontend Authentication Bypass Vulnerability

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).

CVE-2022-21919 High · 7.0 KEV High · 54 CWE-59 Jan 11, 2022

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CVE-2022-21882 High · 7.8 KEV Urgent · 84 Public exploit Ransomware CWE-787 Jan 11, 2022

Microsoft Win32k Privilege Escalation Vulnerability

Win32k Elevation of Privilege Vulnerability

CVE-2022-22265 High · 7.8 KEV High · 46 CWE-703 Jan 10, 2022

Samsung Mobile Devices Use-After-Free Vulnerability

An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.

CVE-2021-35247 Medium · 5.3 KEV High · 51 CWE-20 Jan 10, 2022

SolarWinds Serv-U Improper Input Validation Vulnerability

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U.

CVE-2021-44168 High · 7.8 KEV High · 56 Public exploit CWE-494 Jan 4, 2022

Fortinet FortiOS Arbitrary File Download

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.