{"id":8339,"date":"2022-07-27T10:19:46","date_gmt":"2022-07-27T10:19:46","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8339"},"modified":"2023-02-17T13:28:56","modified_gmt":"2023-02-17T20:28:56","slug":"dhs-cisa-kevs-weekly-edition-12-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/dhs-cisa-kevs-weekly-edition-12-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 12: Patch Before you Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\"><strong>This week, CISA has recommended that patches should be applied for six vulnerabilities by July 28, 2022. All these CVEs are trending now, with one CVE having ransomware associations. Let us look at all the CVEs that need to be patched this week.<\/strong><\/p>\n<p><img decoding=\"async\" style=\"width: 750px; height: 410px;\" src=\"\/wp-content\/uploads\/2022\/09\/dhs-kev-1.png\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Three of the six KEVs were discovered in 2014 and classified as critical CVEs.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 449px;\" src=\"\/wp-content\/uploads\/2022\/09\/dhs-kev-5.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">Three prominent vendor products are affected by the vulnerabilities that need to be patched by July 28, 2022.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 393px;\" src=\"\/wp-content\/uploads\/2022\/09\/dhs-kev-2.png\" alt=\"\" \/><\/p>\n<h2>Severity Scores<\/h2>\n<p>Patching these vulnerabilities is of high priority, as most of them rank critical on the CVSS.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 507px;\" src=\"\/wp-content\/uploads\/2022\/09\/dhs-kev-4.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p dir=\"ltr\">The following CWEs have caused the six vulnerabilities that need to be patched this week.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 440px;\" src=\"\/wp-content\/uploads\/2022\/09\/dhs-kev-3.png\" alt=\"\" \/><br \/>\n<iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrEq1r62gCshUoHR?backgroundColor=blue&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\" style=\"text-align: center;\">Table: DHS CISA KEVs<\/p>\n<p dir=\"ltr\">CVE-2014-6271 is involved in 29 known exploits. Since hackers favor this considerably, the federal government has decreed that it must be prioritized and patched urgently. Similarly, several CVEs on the KEV list have been involved in many exploits. Organizations must be on the lookout for them and remediate them when patches are made available.<\/p>\n<p style=\"text-align: center;\">Keep watching <a href=\"https:\/\/cybersecurityworks.com\/patchwatch\/\" target=\"_blank\" rel=\"noopener\">this space<\/a> for updates on CVE patch deadlines<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This week, CISA has recommended that patches should be applied for six vulnerabilities by July 28, 2022. All these CVEs are trending now, with one CVE having ransomware associations. Let us look at all the CVEs that need to be patched this week. How Far Back Do They Go? Three of the six KEVs were [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,289,288],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8339"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8339"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}