VULNERA Pulse

Aviatrix — Controllers

CVE-2024-50603 / Added: Jan. 16, 2025

CRITICAL CVSS 9.80 EPSS Score 88.88 EPSS Percentile 99.00

Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.

Back to top ↑

Fortinet — FortiOS and FortiProxy

CVE-2024-55591 / Added: Jan. 14, 2025

CRITICAL CVSS 9.80 EPSS Score 2.63 EPSS Percentile 90.23

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Headlines

• Jan. 29, 2025 - PoC Releases for Fortinet Zero-Day Vulnerability CVE-2024-5559, 45,000 Remain Vulnerable
• Jan. 28, 2025 - Fortinet Zero-Day Gives Attackers Super-Admin Privileges
• Jan. 26, 2025 - Week in review: 48k Fortinet firewalls open to attack, attackers "vishing" orgs via Microsoft Teams
• Jan. 21, 2025 - 50K Fortinet firewalls still vulnerable to latest zero-day
• Jan. 20, 2025 - ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]
• Jan. 17, 2025 - 15K Fortinet Device Configs Leaked to the Dark Web
• Jan. 14, 2025 - Multiple Vulnerabilities in Fortinet Products Could Allow for Remote Code Execution

Back to top ↑

Microsoft — Windows

CVE-2025-21335 / Added: Jan. 14, 2025

HIGH CVSS 7.80 EPSS Score 0.10 EPSS Percentile 42.55

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.

Headlines

• Jan. 20, 2025 - ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –

Back to top ↑

Microsoft — Windows

CVE-2025-21334 / Added: Jan. 14, 2025

HIGH CVSS 7.80 EPSS Score 0.10 EPSS Percentile 42.55

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.

Headlines

• Jan. 20, 2025 - ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –

Back to top ↑

Microsoft — Windows

CVE-2025-21333 / Added: Jan. 14, 2025

HIGH CVSS 7.80 EPSS Score 0.05 EPSS Percentile 22.74

Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.

Headlines

• Jan. 20, 2025 - ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –

Back to top ↑

Qlik — Sense

CVE-2023-48365 / Added: Jan. 13, 2025

CRITICAL CVSS 9.90 EPSS Score 1.66 EPSS Percentile 87.47

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

Headlines

• Jan. 20, 2025 - Harry Potter publisher breached, millions of records lifted
• May 13, 2024 - Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia
• April 26, 2024 - Thousands of Qlik Sense Servers Open to Cactus Ransomware
• April 25, 2024 - Cactus Ransomware Targets Qlik Sense Servers
• March 9, 2024 - Magnet Goblin hackers use 1-day flaws to drop custom Linux malware
• March 8, 2024 - Magnet Goblin: A Financially Motivated Exploiter of 1-Day Vulnerabilities
• Dec. 1, 2023 - Qlik Sense flaws exploited in Cactus ransomware campaign
• Nov. 30, 2023 - Cactus ransomware exploiting Qlik Sense flaws to breach networks
• Nov. 30, 2023 - CACTUS Ransomware Exploits Qlik Sense Vulnerabilities in Targeted Attacks
• Nov. 16, 2023 - CVE-2023-48365: Critical Qlik Sense Enterprise Flaw Allows Unauthenticated RCE

Back to top ↑

BeyondTrust — Privileged Remote Access (PRA) and Remote Support (RS)

CVE-2024-12686 / Added: Jan. 13, 2025

HIGH CVSS 7.20 EPSS Score 6.18 EPSS Percentile 93.56

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.

Headlines

• Feb. 1, 2025 - BeyondTrust Zero-Day Breach Exposes 17 SaaS Customers via Compromised API Key
• Jan. 16, 2025 - Find the helpers
• Dec. 31, 2024 - China-linked actors hacked US Treasury Department
• Dec. 31, 2024 - China-linked actors hacked US Treasury Department
• Dec. 31, 2024 - Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents
• Dec. 31, 2024 - US Treasury Department Admits It Got Hacked by China
• Dec. 30, 2024 - US Treasury Department breached through remote support platform
• Dec. 20, 2024 - CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List
• Dec. 19, 2024 - BeyondTrust says hackers breached Remote Support SaaS instances

Back to top ↑

CVE-2025-21311

CRITICAL CVSS 9.80 EPSS Score 0.14 EPSS Percentile 51.15

Risk Context N/A

Published: Jan. 14, 2025

Windows NTLM V1 Elevation of Privilege Vulnerability

Vendor Impacted: Microsoft

Products Impacted: Windows Server 2025, Windows 11 24h2, Windows Server 2022 23h2

Quotes

• More likely to be exploited
• Configur[ing] Microsoft Outlook to read all standard mail in plain text
• As elevation of privilege bugs, they’re being used as part of post-compromise activity, where an attacker has already accessed a target system

Headlines

• Jan. 15, 2025 - 159-CVE January Patch Tuesday smashes single-month record
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –
• Jan. 14, 2025 - Microsoft Patch Tuesday for January 2025 — Snort rules and prominent vulnerabilities

CVE-2025-21298

CRITICAL CVSS 9.80 EPSS Score 0.05 EPSS Percentile 23.85

Remote Code Execution Public Exploits Available

Published: Jan. 14, 2025

Windows OLE Remote Code Execution Vulnerability

Vendor Impacted: Microsoft

Products Impacted: Windows Server 2025, Windows 11 24h2, Windows Server 2008, Windows 10 1809, Windows 11 22h2, Windows Server 2016, Windows Server 2022 23h2, Windows Server 2022, Windows 10 1507, Windows Server 2019, Windows 10 21h2, Windows 10 1607, Windows 10 22h2, Windows Server 2012, Windows 11 23h2

Quotes

• More likely to be exploited
• Configur[ing] Microsoft Outlook to read all standard mail in plain text
• As elevation of privilege bugs, they’re being used as part of post-compromise activity, where an attacker has already accessed a target system

Headlines

• Jan. 15, 2025 - 159-CVE January Patch Tuesday smashes single-month record
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –
• Jan. 14, 2025 - Microsoft Patch Tuesday for January 2025 — Snort rules and prominent vulnerabilities

CVE-2024-55591

CRITICAL CVSS 9.80 EPSS Score 2.63 EPSS Percentile 90.23

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: Jan. 14, 2025

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Vendor Impacted: Fortinet

Products Impacted: Fortiproxy, Fortios, Fortios And Fortiproxy

Quotes

• Once they exhausted its use for themselves (either by selling or using the access), the threat actor(s) decided to leak it in 2025

Headlines

• Jan. 17, 2025 - 15K Fortinet Device Configs Leaked to the Dark Web
• Jan. 14, 2025 - Multiple Vulnerabilities in Fortinet Products Could Allow for Remote Code Execution

CVE-2022-40684

CRITICAL CVSS 9.80 EPSS Score 97.24 EPSS Percentile 99.92

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: Oct. 18, 2022

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Vendor Impacted: Fortinet

Products Impacted: Fortiproxy, Fortiswitchmanager, Fortios, Multiple Products

Quotes

• Every country which has in-scope Fortinet products are visible in the data, except for one – Iran
• Once they exhausted its use for themselves (either by selling or using the access), the threat actor(s) decided to leak it in 2025

Headlines

• Jan. 17, 2025 - 15K Fortinet Device Configs Leaked to the Dark Web
• Jan. 17, 2025 - Fortinet: FortiGate config leaks are genuine but misleading

CVE-2024-7344

HIGH CVSS 8.20 EPSS Score 0.04 EPSS Percentile 0.29

Remote Code Execution

Published: Jan. 14, 2025

Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.

Vendors Impacted: Radix, Wasay, Howyar, Ces, Greenware, Signalcomputer, Sanfong

Products Impacted: Neoimpact, Greenguard, Erecoveryrx, Hdd King, Ez-Back System, Sysreturn, Smartrecovery

Quotes

• Microsoft Corporation UEFI CA 2011
• Maybe it's a lack of secure coding awareness

Headlines

• Jan. 16, 2025 - New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits
• Jan. 16, 2025 - Trusted Apps Sneak a Bug Into UEFI Boot Process

CVE-2025-21395

HIGH CVSS 7.80 EPSS Score 0.05 EPSS Percentile 22.19

Remote Code Execution

Published: Jan. 14, 2025

Microsoft Access Remote Code Execution Vulnerability

Vendor Impacted: Microsoft

Products Impacted: 365 Apps, Access, Office

Quotes

• Configur[ing] Microsoft Outlook to read all standard mail in plain text
• As elevation of privilege bugs, they’re being used as part of post-compromise activity, where an attacker has already accessed a target system

Headlines

• Jan. 15, 2025 - 159-CVE January Patch Tuesday smashes single-month record
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –

CVE-2025-21366

HIGH CVSS 7.80 EPSS Score 0.05 EPSS Percentile 22.19

Remote Code Execution

Published: Jan. 14, 2025

Microsoft Access Remote Code Execution Vulnerability

Vendor Impacted: Microsoft

Products Impacted: 365 Apps, Access, Office

Quotes

• Configur[ing] Microsoft Outlook to read all standard mail in plain text
• As elevation of privilege bugs, they’re being used as part of post-compromise activity, where an attacker has already accessed a target system

Headlines

• Jan. 15, 2025 - 159-CVE January Patch Tuesday smashes single-month record
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –

CVE-2025-21186

HIGH CVSS 7.80 EPSS Score 0.05 EPSS Percentile 22.19

Remote Code Execution

Published: Jan. 14, 2025

Microsoft Access Remote Code Execution Vulnerability

Vendor Impacted: Microsoft

Products Impacted: 365 Apps, Access, Office

Quotes

• Configur[ing] Microsoft Outlook to read all standard mail in plain text
• As elevation of privilege bugs, they’re being used as part of post-compromise activity, where an attacker has already accessed a target system

Headlines

• Jan. 15, 2025 - 159-CVE January Patch Tuesday smashes single-month record
• Jan. 14, 2025 - Microsoft: Happy 2025. Here’s 161 Security Updates –

CVE-2024-8531

HIGH CVSS 7.20 EPSS Score 0.07 EPSS Percentile 31.25

Risk Context N/A

Published: Oct. 11, 2024

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.

Headlines

• Jan. 16, 2025 - Schneider Electric Data Center Expert | CISA

CVE-2024-8530

MEDIUM CVSS 5.90 EPSS Score 0.07 EPSS Percentile 31.25

Risk Context N/A

Published: Oct. 11, 2024

CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcaptures” archive is accessed directly by HTTPS.

Headlines

• Jan. 16, 2025 - Schneider Electric Data Center Expert | CISA