{"id":8369,"date":"2022-06-17T11:03:11","date_gmt":"2022-06-17T11:03:11","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8369"},"modified":"2023-02-17T13:34:56","modified_gmt":"2023-02-17T20:34:56","slug":"dhs-cisa-kevs-weekly-edition-7-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/webdev.securin.xyz\/patch_watch\/dhs-cisa-kevs-weekly-edition-7-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 7: Patch Before you Hit the Deadline"},"content":{"rendered":"<p>There are 778 vulnerabilities in the US Cybersecurity and Infrastructure Security Agency (CISA) list with 4 of them added recently. Among these vulnerabilities, 75 of them need to be patched this week (June 13 to June 17, 2022).<\/p>\n<p dir=\"ltr\">The federal agencies are required to meet this deadline and ensure that the patches are deployed and their systems protected against malicious attacks.<\/p>\n<p dir=\"ltr\">We analysed the CISA Known Exploited Vulnerabilities (KEVs) and found that &#8211;<\/p>\n<p><img decoding=\"async\" style=\"width: 800px; height: 395px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kevs-1.png\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p dir=\"ltr\">Of the 75 KEVs, 74 CVEs are old vulnerabilities dating from 2010 to 2021, with a patch deadline of June 13, 2022 to June 19, 2022.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 182px;\" src=\"\/wp-content\/uploads\/2022\/10\/year-wise-breakdown-2-1.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">There are 15 vendors that are affected by the CVEs having a patch deadline of June 13 to June 19, 2022. They are listed below:<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 510px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendors-affected.png\" alt=\"\" \/>\n<\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\">39 of these vulnerabilities have a very high CVSS score and need to be patched immediately.<\/p>\n<p dir=\"ltr\">\u00a0<img decoding=\"async\" style=\"width: 550px; height: 485px;\" src=\"\/wp-content\/uploads\/2022\/10\/severity-scores-1-1.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 736px;\" src=\"\/wp-content\/uploads\/2022\/10\/software-weaknesses-1.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrFlJtw5AZpcfwBT?backgroundColor=green&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\">\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Table: DHS CISA KEVs<\/p>\n<p dir=\"ltr\">Most of the CVEs that require patching are trending in the cyber realm, meaning that these are actively being scoped out and exploited by attackers. Therefore, it is essential that public and private organizations dedicate resources to identify and patch these vulnerabilities as soon as possible.<\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\">To know more about our CISA known exploited vulnerabilities catalog analysis and vulnerabilities to be patched in June Month. <a href=\"https:\/\/cybersecurityworks.com\/blog\/cisa\/cisa-releases-a-directive-asking-organizations-to-patch-known-exploited-vulnerabilities.html\">Click here<\/a><\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\">\n","protected":false},"excerpt":{"rendered":"<p>There are 778 vulnerabilities in the US Cybersecurity and Infrastructure Security Agency (CISA) list with 4 of them added recently. Among these vulnerabilities, 75 of them need to be patched this week (June 13 to June 17, 2022). The federal agencies are required to meet this deadline and ensure that the patches are deployed and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,288],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch\/8369"}],"collection":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/media?parent=8369"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/webdev.securin.xyz\/wp-json\/wp\/v2\/patch_category?post=8369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}