The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

CISA Adds 15 Known Exploited Vulnerabilities to Catalog
January 10, 2022

Spoiler: 15 Vulnerabilities

Code:

CVE Number    CVE Title   Remediation Due Date
CVE-2021-22017    VMware vCenter Server Improper Access Control Vulnerability    1/24/2022
CVE-2021-36260      Hikvision Improper Input Validation Vulnerability    1/24/2022
CVE-2021-27860    FatPipe WARP, IPVPN, and MPVPN Privilege Escalation vulnerability    1/24/2022
CVE-2020-6572    Google Chrome prior to 81.0.4044.92 Use-After-Free Vulnerability    7/10/2022
CVE-2019-1458    Microsoft Win32K Elevation of Privilege Vulnerability    7/10/2022
CVE-2013-3900    Microsoft WinVerify Trust Function Remote Code Execution Vulnerability    7/10/2022
CVE-2019-2725    Oracle WebLogic Server, Injection Vulnerability    7/10/2022
CVE-2019-9670    Synacor Zimbra Collaboration Suite Improper Restriction of XML External Entity Reference Vulnerability    7/10/2022
CVE-2018-13382    Fortinet FortiOS and FortiProxy Improper Authorization Vulnerability    7/10/2022
CVE-2018-13383    Fortinet FortiOS and FortiProxy Improper Authorization Vulnerability    7/10/2022
CVE-2019-1579    Palo Alto Networks PAN-OS Remote Code Execution Vulnerability        7/10/2022
CVE-2019-10149    Exim Mail Transfer Agent (MTA) Improper Input Validation Vulnerability    7/10/2022
CVE-2015-7450        IBM WebSphere Application Server and Server Hy Server Hypervisor Edition Remote Code Execution Vulnerability    7/10/2022
CVE-2017-1000486    Primetek Primefaces Application Remote Code Execution Vulnerability    7/10/2022
CVE-2019-7609    Elastic Kibana Remote Code Execution Vulnerability    7/10/2022