The CISA has added 15 new security issues to its Catalog of Known Exploited Vulnerabilities. These vulnerabilities are used in frequent attack vectors aimed at federal agencies.
The catalog of known exploited vulnerabilities is part of the Binding Operational Directive (BOD) 22-01, aimed at improving vulnerability management for federal civilian agencies and reducing security risks.
Old bugs at work, otherwise
The agency issued a new list of known exploited vulnerabilities after discovering evidence that the security flaws are actively being used in ongoing attacks.
- Out of 15 entries, only four are recent and the rest are several years old.
- The oldest flaw is from 2013, which is tracked as CVE-2013-3900, affecting Windows versions starting XP SP2 to Server 2012.
- Another vulnerability is from 2015, an RCE flaw in IBM Server Hy Server Hypervisor Edition and WebSphere Application Server, tracked as CVE-2015-7450.
The body demands three flaws to be remediated by federal civilian agencies before January 24, while the rest by July 10.
The table of known vulnerabilities
The agency has provided a list of known vulnerabilities in multiple products from various vendors, including Oracle, Hikvision, FatPipe, VMware, Palo Alto Networks, Fortinet, and IBM, among others.
- The vulnerabilities rated critical severity include CVE-2019-10149 (Exim Mail), CVE-2015-7450 (IBM WebSphere Application Server), CVE-2017-1000486 (Primetek Primefaces), CVE-2019-7609 & CVE-2013-3900 (Elastic Kibana), CVE-2019-2725 (Oracle WebLogic Server), and CVE-2019-9670 (Synacor Zimbra).
- The high severity rated vulnerabilities include CVE-2021-36260 (Hikvision), CVE-2021-27860 (FatPipe), CVE-2020-6572 (Google Chrome), CVE-2019-1458 (Microsoft Win32K), CVE-2019-1579 (PAN-OS), and CVE-2018-13382 (Fortinet FortiOS).
- Moreover, the list includes a few vulnerabilities with Medium severity: CVE-2021-22017 (VMware vCenter Server) and CVE-2018-13383 (Fortinet FortiOS).
Conclusion
The recent alert points to the fact that ongoing cyberattacks are actively exploiting old vulnerabilities. The CISA strongly recommends all organizations patch the vulnerabilities listed in the catalog. Moreover, it is recommended to implement a proper patch management program for better protection.
Publisher
/https://cyware-ent.s3.amazonaws.com/image_bank/shutterstock_509260468.jpg)
/https://cyware-ent.s3.amazonaws.com/image_bank/37ce_shutterstock_639700315.jpg)
