{"id":12143,"date":"2022-09-30T05:52:34","date_gmt":"2022-09-30T12:52:34","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=12143"},"modified":"2023-03-16T09:15:26","modified_gmt":"2023-03-16T16:15:26","slug":"dhs-cisa-kevs-weekly-edition-19-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/dhs-cisa-kevs-weekly-edition-19-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 19: Patch Before You Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">The US Cybersecurity and Infrastructure Security Agency (CISA) raises the alarm about known exploited vulnerabilities by adding new CVEs to the growing list of KEV catalog. It added 3 CVEs to the KEV on September 20, 2022 bring the total to 837. In this blog, we bring you all the DHS CISA KEVs that need to be prioritized for patching this week (September 26 to September 30, 2022).<\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Why are these vulnerabilities important?<\/h2>\n<p dir=\"ltr\">CISA\u2019s KEVs is a collection of vulnerabilities that have been exploited by threat actors time and again. If left unpatched, these become low hanging fruits that attackers can easily misuse.<\/p>\n<p dir=\"ltr\">A total of 12 known exploited vulnerabilities from the DHS CISA catalog should be fixed by federal agencies this week before September 26 to September 30, 2022.\u00a0 We urge all organizations to address these to safeguard their networks from attacks.<\/p>\n<p dir=\"ltr\">We further analyzed these 12 KEVs and found that:<\/p>\n<p><img decoding=\"async\" style=\"width: 750px; height: 410px;\" src=\"https:\/\/cybersecurityworks.com\/howdymanage\/uploads\/image\/patch-watch\/cisa\/dhs-19\/highlight-image.png\" alt=\"\" \/><\/p>\n<ul>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">The vulnerabilities affect 59 products which are actively used in organizations. All these CVEs were added on September 9th and required to be patched by the end of the month indicating the danger these vulnerabilities bring.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">Among the 5 trending vulnerabilities, 4 are old CVEs dating back to 2011, 2017, and 2018. These have been exploited multiple times by threat actors and will continue to be easy targets unless patched.<\/p>\n<\/li>\n<li dir=\"ltr\" aria-level=\"1\">\n<p dir=\"ltr\" role=\"presentation\">CVE-2018-13374 is a vulnerability famously exploited by the Conti group. Although this APT group is no longer operational, multiple threat actors imitate Conti\u2019s exploits. If this CVE is present in your system, it will pose a grave threat.<\/p>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Except for 4 vulnerabilities, all CVEs have been around for a while, 2 of them since 2011. One of the 2011 CVEs is a PE vulnerability in Andriod OS.<\/p>\n<h2 dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 347px;\" src=\"https:\/\/cybersecurityworks.com\/howdymanage\/uploads\/image\/patch-watch\/cisa\/dhs-19\/year-wise-breakdown.png\" alt=\"\" \/><\/h2>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">D-LINK is the worst affected with 4 vulnerabilities. Recently, APT groups such as especially in China have targeted SOHO routers to break into organization networks The rest of the vulnerabilities are also in popular vendors which are used widely at organizations and homes.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 393px;\" src=\"https:\/\/cybersecurityworks.com\/howdymanage\/uploads\/image\/patch-watch\/cisa\/dhs-19\/vendors-affected.png\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">Organizations must keep themselves up to date with these vendor advisories and upgrade their products as and when new patches are released.<\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\">Patching these vulnerabilities is of high priority, as they rank high and critical on the CVSS scoring scale. Exploiting such vulnerabilities will allow attackers to cause maximum damage to their victim networks.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 528px;\" src=\"https:\/\/cybersecurityworks.com\/howdymanage\/uploads\/image\/patch-watch\/cisa\/dhs-19\/severity-scores.png\" alt=\"\" \/><br \/>\nCVE-2022-3075, the Chromium vulnerability has not been assigned any CVSS score.<\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p dir=\"ltr\">The following CWEs have caused the vulnerabilities that need to be patched this week. These are the weaknesses developers should be aware of and work to overcome while making their products.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 584px;\" src=\"https:\/\/cybersecurityworks.com\/howdymanage\/uploads\/image\/patch-watch\/cisa\/dhs-19\/software-weaknesses.png\" alt=\"\" \/><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr7VivxQ3tUS02NW?backgroundColor=blue&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\" style=\"text-align: center;\"><strong>Table: DHS CISA KEVs<\/strong><\/p>\n<p dir=\"ltr\"><strong>We urge organizations to implement patches for these CVEs at the earliest. With Securin\u2019s threat-based approach and vulnerability intelligence, security teams can prioritize the threats, including all KEVs, and minimize their attack surface.<\/strong><\/p>\n<p dir=\"ltr\">For the latest news regarding vulnerabilities that are exploited and critical threats, read our blog on <a href=\"https:\/\/cybersecurityworks.com\/blog\/cyber-risk\/csws-threat-intelligence-september-26-2022-september-30-2022.html\">Weekly Threat Intelligence<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The US Cybersecurity and Infrastructure Security Agency (CISA) raises the alarm about known exploited vulnerabilities by adding new CVEs to the growing list of KEV catalog. It added 3 CVEs to the KEV on September 20, 2022 bring the total to 837. In this blog, we bring you all the DHS CISA KEVs that need [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/12143"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=12143"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=12143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}