Vulnerability News - May 12, 2023

Snapshot

May 6, 2023 - May 12, 2023

CISA Known Exploited Vulnerabilities
CVE	Summary	Severity	Vendor	Date Added
CVE-2023-25717	Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.	CRITICAL	Ruckus Wireless	May 12, 2023
CVE-2016-8735	Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.	CRITICAL	Apache	May 12, 2023
CVE-2016-3427	Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.	CRITICAL	Oracle	May 12, 2023
CVE-2021-3560	Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.	HIGH	Red Hat	May 12, 2023
CVE-2010-3904	Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.	HIGH	Linux	May 12, 2023
CVE-2014-0196	Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service or gain privileges via read and write operations with long strings.	MEDIUM	Linux	May 12, 2023
CVE-2015-5317	Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.	MEDIUM	Jenkins	May 12, 2023
CVE-2023-29336	Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.	HIGH	Microsoft	May 9, 2023
Newswires
CISA Issues Warning on Critical Ruckus Bug Exploited by DDoS Botnet The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical remote code execution (RCE) vulnerability (CVE-2023-25717) in the Ruckus Wireless Admin panel.				May 12, 2023
FBI Warns of Bl00dy Ransomware Targeting Education Sector via PaperCut Vulnerability The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have issued a joint advisory to alert organizations, particularly in the education sector, about the Bl00dy Ransomware gang's active exploitation of the PaperCut remote-code execution vulnerability, CVE-2023-27350.				May 12, 2023
Rockwell Automation Products Plagued by Over a Dozen Vulnerabilities Rockwell Automation has informed its customers about a series of potentially serious vulnerabilities discovered and patched in multiple products.				May 12, 2023
Details Unveiled for Exploit Chain Targeting Netgear Routers Industrial and IoT cybersecurity firm Claroty has disclosed details about five vulnerabilities that can be chained together in an exploit, enabling threat actors to hack certain Netgear routers without needing authentication.				May 11, 2023
Zero-Click Windows Vulnerability Allows NTLM Credential Theft Cybersecurity researchers have recently disclosed information about a now-fixed security vulnerability in the Windows MSHTML platform.				May 10, 2023
Microsoft Addresses Secure Boot Zero-Day Exploited by BlackLotus Malware Microsoft has issued security updates to tackle a Secure Boot zero-day vulnerability that has been exploited by the BlackLotus UEFI malware to infect fully patched Windows systems.				May 9, 2023
Microsoft's May 2023 Patch Tuesday Addresses 3 Zero-Days and 38 Flaws Microsoft's May 2023 Patch Tuesday has arrived, and it brings security updates that address three zero-day vulnerabilities and a total of 38 flaws.				May 9, 2023
ICS Patch Tuesday: Siemens and Schneider Electric Address Multiple Vulnerabilities Siemens and Schneider Electric’s Patch Tuesday advisories for May 2023 address several vulnerabilities discovered in their products.				May 9, 2023
AndoryuBot DDoS Botnet Exploits Ruckus Wireless Admin Vulnerability Researchers from FortiGuard Labs have observed a significant increase in attacks targeting the Ruckus Wireless Admin remote code execution vulnerability, tracked as CVE-2023-25717.				May 9, 2023
Iranian Hackers Target PaperCut Vulnerability in Latest Attack Wave Microsoft has revealed that Iranian state-backed hacking groups have joined the ongoing attack spree targeting vulnerable PaperCut MF/NG print management servers.				May 8, 2023
Vulnerabilities In The News
CVE	Summary	Severity	Vendor	Risk Context
CVE-2023-27350 (11)	This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 .	CRITICAL	Papercut	CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available
CVE-2023-23397 (8)	Microsoft Outlook Elevation of Privilege Vulnerability	CRITICAL	Microsoft	CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available
CVE-2023-24941 (7)	Windows Network File System Remote Code Execution Vulnerability	CRITICAL		Remote Code Execution
CVE-2023-32243 (6)	Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation.	CRITICAL		Actively Exploited
CVE-2023-25717 (6)	Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a...	CRITICAL	Ruckus Wireless, Ruckuswireless	CISA Known Exploited Actively Exploited Remote Code Execution
CVE-2023-29325 (13)	Windows OLE Remote Code Execution Vulnerability	HIGH		Remote Code Execution
CVE-2023-29336 (17)	Win32k Elevation of Privilege Vulnerability	HIGH	Microsoft	CISA Known Exploited
CVE-2023-24932 (19)	Secure Boot Security Feature Bypass Vulnerability	MEDIUM		Actively Exploited
CVE-2023-29324 (10)	Windows MSHTML Platform Security Feature Bypass Vulnerability	MEDIUM		Risk Context N/A
CVE-2022-21894 (6)	Secure Boot Security Feature Bypass Vulnerability.	MEDIUM	Microsoft	Actively Exploited Remote Code Execution Public Exploits Available

CISA Known Exploited Vulnerabilities

CISA added eight vulnerabilities to the known exploited vulnerabilities list.

Ruckus Wireless — Multiple Products

CVE-2023-25717 / Added: May 12, 2023

CRITICAL CVSS 9.80

Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.

Headlines

Apache — Tomcat

CVE-2016-8735 / Added: May 12, 2023

CRITICAL CVSS 9.80

Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.

Oracle — Java SE and JRockit

CVE-2016-3427 / Added: May 12, 2023

CRITICAL CVSS 9.00

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.

Red Hat — Polkit

CVE-2021-3560 / Added: May 12, 2023

HIGH CVSS 7.80

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

Linux — Kernel

CVE-2010-3904 / Added: May 12, 2023

HIGH CVSS 7.20

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Linux — Kernel

CVE-2014-0196 / Added: May 12, 2023

MEDIUM CVSS 6.90

Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service or gain privileges via read and write operations with long strings.

Jenkins — Jenkins User Interface (UI)

CVE-2015-5317 / Added: May 12, 2023

MEDIUM CVSS 5.00

Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages.

Microsoft — Win32k

CVE-2023-29336 / Added: May 9, 2023

HIGH CVSS 7.80

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges.

Headlines

In The News

Vulnerabilities receiving the most attention in traditional news media.

CVE-2023-27350

CRITICAL CVSS 9.80

CISA Known Exploited Actively Exploited Remote Code Execution Used In Ransomware Public Exploits Available

Published: April 20, 2023

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.

Vendor Impacted: Papercut

Products Impacted: Mf/ng, Papercut Ng, Papercut Mf

Quotes

In early May 2023, according to FBI information, the Bl00dy Ransomware Gang gained access to victim networks across the Education Facilities Subsector where PaperCut servers vulnerable to CVE-2023-27350 were exposed to the internet
According to FBI observed information, malicious actors exploited CVE-2023-27350 beginning in mid-April 2023 and continuing through the present
FBI and CISA strongly encourage users and administrators to immediately apply patches, and workarounds if unable to patch. FBI and CISA especially encourage organizations who did not patch immediately to assume compromise and hunt for malicious activity
The Bl00dy Ransomware Gang gained access to victim networks across the Education Facilities Subsector where PaperCut servers vulnerable to CVE-2023-27350 were exposed to the internet
After public POCs were published for CVE-2023-27350, Mint Sandstorm & Mango Sandstorm quickly adapted the exploit in their operations to achieve initial access. This activity shows Mint Sandstorm’s continued ability to rapidly incorporate POC exploits into their operations
This activity shows Mint Sandstorm's continued ability to rapidly incorporate [proof-of-concept] exploits into their operations
More actors are exploiting unpatched CVE-2023-27350 in print management software Papercut since we last reported on Lace Tempest. Microsoft has now observed Iranian state-sponsored threat actors Mint Sandstorm (PHOSPHORUS) & Mango Sandstorm (MERCURY) exploiting CVE-2023-27350
The PaperCut exploitation activity by Mint Sandstorm appears opportunistic, affecting organizations across sectors and geographies
This report shows that detections that focus on one code execution method, or that focus on a small subset of techniques used by one threat actor, are doomed to be useless in the next round of attacks

Headlines

CVE-2023-23397

CRITICAL CVSS 9.80

CISA Known Exploited Actively Exploited Remote Code Execution Public Exploits Available

Published: March 14, 2023

Microsoft Outlook Elevation of Privilege Vulnerability

Vendor Impacted: Microsoft

Products Impacted: Office, Outlook, 365 Apps

Quotes

All Windows versions are affected by the vulnerability. As a result, all Outlook client versions on Windows are exploitable
An unauthenticated attacker on the internet could use the vulnerability to coerce an Outlook client to connect to an attacker-controlled server. This results in NTLM credentials theft. It is a zero-click vulnerability, meaning it can be triggered with no user interaction
An attacker can craft a malicious URL that would evade zone checks, resulting in a limited loss of integrity and availability of the victim machine
A limited loss of integrity and availability of the victim machine
Our research indicates that the new vulnerability re-enables the exploitation of a critical vulnerability that was seen in the wild and used by APT operators
The new vulnerability [CVE-2023-29324] re-enables the exploitation of a critical vulnerability [CVE-2023-23397] that was seen in the wild and used by APT operators
An unauthenticated attacker on the internet could use the vulnerability to coerce an Outlook client to connect to an attacker-controlled server

Headlines

CVE-2023-24941

CRITICAL CVSS 9.80

Remote Code Execution

Published: May 9, 2023

Windows Network File System Remote Code Execution Vulnerability

Quotes

Local Privilege escalation vulnerabilities are a key part of attackers’ objectives
When Windows Message Queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
This type of privilege escalation is usually combined with a code execution bug to spread malware
The May 9, 2023 security update provides configuration options to manually enable protections for the Secure Boot bypass but these protections are not enabled automatically. Before you enable these protections, you must verify your devices and all bootable media are updated and ready for this security hardening change
This is the fifth month in a row that an elevation of privilege vulnerability was exploited in the wild as a zero day. We anticipate details surrounding its exploitation to be made public soon by the researchers that discovered it
An attacker to take additional actions prior to exploitation to prepare the target environment

Headlines

CVE-2023-32243

CRITICAL CVSS 9.80

Actively Exploited

Published: May 12, 2023

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

Quotes

This plugin suffers from an unauthenticated privilege escalation vulnerability and allows any unauthenticated user to escalate their privilege to that of any user on the WordPress site
It is possible to reset the password of any user as long as we know their username, thus being able to reset the password of the administrator and login on their account
It is possible to reset the password of any user as long as we know their username thus being able to reset the password of the administrator and login on their account
[By exploiting the flaw] It is possible to reset the password of any user as long as we know their username, thus being able to reset the password of the administrator and login on their account

Headlines

CVE-2023-25717

CRITICAL CVSS 9.80

CISA Known Exploited Actively Exploited Remote Code Execution

Published: Feb. 13, 2023

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

Vendors Impacted: Ruckus Wireless, Ruckuswireless

Products Impacted: Q710, R730, E510, R720, Zd1000, H500, T301s, T504, R760, H550, M510-Jp, R320, R700, H350, Q910, T710s, R500, T811-Cm, Sz300-Federal, Zd1200, T310s, R310, Ruckus Wireless Admin, T350c, Multiple Products, Zd1100, T350d, R550, R710, T710, T750, R300, Sz-144, R350, Sz300, T310c, T750se, R650, Sz100, M510, T300, H320, T310d, Q410, Smartzone, R750, T350se, Zd3000, R850, R510, T310n, T301n, T811-Cm$Non-Spf$, P300, R600, Sz-144-Federal, R560, R610, Smartzone Ap, T610, Zd5000, H510

Quotes

It contains DDoS attack modules for different protocols and communicates with its command-and-control server using SOCKS5 proxies
[AndoryuBot] contains DDoS attack modules for different protocols and communicates with its command-and-control server using SOCKS5 proxies
Once a target device is compromised, AndoryuBot quickly spreads and begins communicating with its C2 server via the SOCKS protocol. In a very short time, it is updated with additional DDoS methods and awaits attack commands

Headlines

CVE-2023-29325

HIGH CVSS 8.10

Remote Code Execution

Published: May 9, 2023

Windows OLE Remote Code Execution Vulnerability

Quotes

Attacker to execute self-signed code at the Unified Extensible Firmware Interface (UEFI) level while Secure Boot is enabled
It has a local attack vector, meaning the attacker needs access to the targeted system. The attack complexity is low, requiring minimal privileges and no user interaction
This number is expected to rise in the coming months
Local Privilege escalation vulnerabilities are a key part of attackers’ objectives
When Windows Message Queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
This type of privilege escalation is usually combined with a code execution bug to spread malware
The May 9, 2023 security update provides configuration options to manually enable protections for the Secure Boot bypass but these protections are not enabled automatically. Before you enable these protections, you must verify your devices and all bootable media are updated and ready for this security hardening change
This is the fifth month in a row that an elevation of privilege vulnerability was exploited in the wild as a zero day. We anticipate details surrounding its exploitation to be made public soon by the researchers that discovered it
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges
An attacker to take additional actions prior to exploitation to prepare the target environment

Headlines

CVE-2023-29336

HIGH CVSS 7.80

CISA Known Exploited

Published: May 9, 2023

Win32k Elevation of Privilege Vulnerability

Vendor Impacted: Microsoft

Product Impacted: Win32k

Quotes

Attacker to execute self-signed code at the Unified Extensible Firmware Interface (UEFI) level while Secure Boot is enabled
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges
It has a local attack vector, meaning the attacker needs access to the targeted system. The attack complexity is low, requiring minimal privileges and no user interaction
This number is expected to rise in the coming months
Local Privilege escalation vulnerabilities are a key part of attackers’ objectives
When Windows Message Queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
This type of privilege escalation is usually combined with a code execution bug to spread malware
The May 9, 2023 security update provides configuration options to manually enable protections for the Secure Boot bypass but these protections are not enabled automatically. Before you enable these protections, you must verify your devices and all bootable media are updated and ready for this security hardening change
This is the fifth month in a row that an elevation of privilege vulnerability was exploited in the wild as a zero day. We anticipate details surrounding its exploitation to be made public soon by the researchers that discovered it
An attacker to take additional actions prior to exploitation to prepare the target environment

Headlines

CVE-2023-24932

MEDIUM CVSS 6.70

Actively Exploited

Published: May 9, 2023

Secure Boot Security Feature Bypass Vulnerability

Quotes

The Secure Boot feature precisely controls the boot media that is allowed to load when an operating system is initiated, and if this fix is not properly enabled there is a potential to cause disruption and prevent a system from starting up
Attacker to execute self-signed code at the Unified Extensible Firmware Interface (UEFI) level while Secure Boot is enabled
Why don’t MSI immediately revoke the stolen keys, stop using them, and then push out new firmware signed with new keys
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges
It has a local attack vector, meaning the attacker needs access to the targeted system. The attack complexity is low, requiring minimal privileges and no user interaction
This number is expected to rise in the coming months
Local Privilege escalation vulnerabilities are a key part of attackers’ objectives
When Windows Message Queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code
This type of privilege escalation is usually combined with a code execution bug to spread malware
The May 9, 2023 security update provides configuration options to manually enable protections for the Secure Boot bypass but these protections are not enabled automatically. Before you enable these protections, you must verify your devices and all bootable media are updated and ready for this security hardening change
This is the fifth month in a row that an elevation of privilege vulnerability was exploited in the wild as a zero day. We anticipate details surrounding its exploitation to be made public soon by the researchers that discovered it
To protect against this attack, a fix for the Windows boot manager (CVE-2023-24932) is included in the May 9, 2023, security update release, but disabled by default and will not provide protections
Microsoft is releasing CVE-2023-24932, and associated configuration guidance, to address a Secure Boot bypass vulnerability used by the BlackLotus bootkit to exploit CVE-2022-21894

Headlines

CVE-2023-29324

MEDIUM CVSS 6.50

Risk Context N/A

Published: May 9, 2023

Windows MSHTML Platform Security Feature Bypass Vulnerability

Quotes

All Windows versions are affected by the vulnerability. As a result, all Outlook client versions on Windows are exploitable
Attacker to execute self-signed code at the Unified Extensible Firmware Interface (UEFI) level while Secure Boot is enabled
An unauthenticated attacker on the internet could use the vulnerability to coerce an Outlook client to connect to an attacker-controlled server. This results in NTLM credentials theft. It is a zero-click vulnerability, meaning it can be triggered with no user interaction
An attacker can craft a malicious URL that would evade zone checks, resulting in a limited loss of integrity and availability of the victim machine
A limited loss of integrity and availability of the victim machine
Our research indicates that the new vulnerability re-enables the exploitation of a critical vulnerability that was seen in the wild and used by APT operators
The new vulnerability [CVE-2023-29324] re-enables the exploitation of a critical vulnerability [CVE-2023-23397] that was seen in the wild and used by APT operators
An unauthenticated attacker on the internet could use the vulnerability to coerce an Outlook client to connect to an attacker-controlled server
An attacker to take additional actions prior to exploitation to prepare the target environment

Headlines

CVE-2022-21894

MEDIUM CVSS 4.40

Actively Exploited Remote Code Execution Public Exploits Available

Published: Jan. 11, 2022

Secure Boot Security Feature Bypass Vulnerability.

Vendor Impacted: Microsoft

Products Impacted: Windows Server, Windows 8.1, Windows 11, Windows Server 2012, Windows 10, Windows Server 2016, Windows Server 2019

Quotes

The Secure Boot feature precisely controls the boot media that is allowed to load when an operating system is initiated, and if this fix is not properly enabled there is a potential to cause disruption and prevent a system from starting up
This number is expected to rise in the coming months
This is the fifth month in a row that an elevation of privilege vulnerability was exploited in the wild as a zero day. We anticipate details surrounding its exploitation to be made public soon by the researchers that discovered it
Microsoft is releasing CVE-2023-24932, and associated configuration guidance, to address a Secure Boot bypass vulnerability used by the BlackLotus bootkit to exploit CVE-2022-21894
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges

Headlines

Vulnerability and threat intelligence direct to your inbox every week.

Subscribe to Pulse

Ready to Offload Vulnerability Management?

Schedule a free consultation with a vulnerability expert to discuss your use cases and to see a demo.

Request a Demo

Solutions

By Solution

By Feature

I Want To…

Learn More

VULNERA vs Vulnerability Scanners

Who It’s For

CISO’s

IT & Security Teams

Risk & Compliance

Security Assessment Buyers Guide

Resources

Resources

Blog

Threat Intelligence

I Want To…

Learn More

Top 10 Vulnerability Management Questions Answered

About

About

Partners

I Want To…

Learn More

Simplifying Vulnerability Management

VULNERA Pulse

A digest of noteworthy issues being discussed in the information security industry.

May 12, 2023

Subscribe

Ready to Offload Vulnerability Management?

Quick Menu

Solutions

Features

CISO Challenges

IT Challenges

Compliance

Subscribe

By Solution

By Feature

I Want To…

Learn More

VULNERA vs Vulnerability Scanners

Security Assessment Buyers Guide

Resources

Resources

Blog

Threat Intelligence

I Want To…

Learn More

Top 10 Vulnerability Management Questions Answered

About

About

Partners

I Want To…

Learn More

Simplifying Vulnerability Management

VULNERA Pulse

A digest of noteworthy issues being discussed in the information security industry.

May 12, 2023

Snapshot

CISA Known Exploited Vulnerabilities

Newswires

Vulnerabilities In The News

CISA Known Exploited Vulnerabilities

Ruckus Wireless — Multiple Products

Apache — Tomcat

Oracle — Java SE and JRockit

Red Hat — Polkit

Linux — Kernel

Linux — Kernel

Jenkins — Jenkins User Interface (UI)

Microsoft — Win32k

In The News

Subscribe

Ready to Offload Vulnerability Management?

Quick Menu

Features

Subscribe