VULNERA Pulse

Cisco — IOS, IOS XR, and IOS XE

CVE-2016-6415 / Added: May 19, 2023

HIGH CVSS 7.50

Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

Back to top ↑

Cisco — IOS

CVE-2004-1464 / Added: May 19, 2023

MEDIUM CVSS 5.00

Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.

Back to top ↑

Samsung — Mobile Devices

CVE-2023-21492 / Added: May 19, 2023

MEDIUM CVSS 4.40

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

Back to top ↑

CVE-2023-23529

HIGH CVSS 8.80

CISA Known Exploited Actively Exploited Remote Code Execution

Published: Feb. 27, 2023

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2.1, iOS 16.3.1 and iPadOS 16.3.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Vendor Impacted: Apple

Products Impacted: Multiple Products, Iphone Os, Safari, Ipados, Macos

Quotes

• Apple is aware of a report that this issue may have been actively exploited

Headlines

• May 19, 2023 - WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities
• May 18, 2023 - Apple fixed three new actively exploited zero-day vulnerabilities
• May 18, 2023 - Apple fixes three zero-days exploited to hack iPhones and Macs
• May 18, 2023 - Apple fixes three new zero-days exploited to hack iPhones, Macs

CVE-2023-20189

HIGH CVSS 8.60

Risk Context N/A

Published: May 18, 2023

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

Quotes

• An attacker could exploit this vulnerability by sending a crafted request through the web-based user interface
• Is not aware of any malicious use of the vulnerabilities that are described in this advisory
• The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability
• Execute arbitrary code with root privileges on an affected device

Headlines

• May 19, 2023 - Cisco is patching some small business router bugs, so patch now
• May 18, 2023 - Cisco fixes critical flaws in small business switches
• May 18, 2023 - Critical remote code execution flaws patched in Cisco small business switches
• May 18, 2023 - Cisco Says PoC Exploits Available for Newly Patched Enterprise Switch Vulnerabilities
• May 18, 2023 - Cisco fixes critical flaws in Small Business Series Switches
• May 18, 2023 - Cisco switch firmware patched against critical bugs
• May 17, 2023 - Cisco warns of critical switch bugs with public exploit code

CVE-2023-20161

HIGH CVSS 8.60

Risk Context N/A

Published: May 18, 2023

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

Quotes

• An attacker could exploit this vulnerability by sending a crafted request through the web-based user interface
• Is not aware of any malicious use of the vulnerabilities that are described in this advisory
• The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability
• Execute arbitrary code with root privileges on an affected device

Headlines

• May 19, 2023 - Cisco is patching some small business router bugs, so patch now
• May 18, 2023 - Cisco fixes critical flaws in small business switches
• May 18, 2023 - Critical remote code execution flaws patched in Cisco small business switches
• May 18, 2023 - Cisco Says PoC Exploits Available for Newly Patched Enterprise Switch Vulnerabilities
• May 18, 2023 - Cisco fixes critical flaws in Small Business Series Switches
• May 18, 2023 - Cisco switch firmware patched against critical bugs
• May 17, 2023 - Cisco warns of critical switch bugs with public exploit code

CVE-2023-20160

HIGH CVSS 8.60

Risk Context N/A

Published: May 18, 2023

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

Quotes

• An attacker could exploit this vulnerability by sending a crafted request through the web-based user interface
• Is not aware of any malicious use of the vulnerabilities that are described in this advisory
• The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability
• Execute arbitrary code with root privileges on an affected device

Headlines

• May 19, 2023 - Cisco is patching some small business router bugs, so patch now
• May 18, 2023 - Cisco fixes critical flaws in small business switches
• May 18, 2023 - Critical remote code execution flaws patched in Cisco small business switches
• May 18, 2023 - Cisco Says PoC Exploits Available for Newly Patched Enterprise Switch Vulnerabilities
• May 18, 2023 - Cisco fixes critical flaws in Small Business Series Switches
• May 18, 2023 - Cisco switch firmware patched against critical bugs
• May 17, 2023 - Cisco warns of critical switch bugs with public exploit code

CVE-2023-20159

HIGH CVSS 8.60

Risk Context N/A

Published: May 18, 2023

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

Quotes

• An attacker could exploit this vulnerability by sending a crafted request through the web-based user interface
• Is not aware of any malicious use of the vulnerabilities that are described in this advisory
• The vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability
• Execute arbitrary code with root privileges on an affected device

Headlines

• May 19, 2023 - Cisco is patching some small business router bugs, so patch now
• May 18, 2023 - Cisco fixes critical flaws in small business switches
• May 18, 2023 - Critical remote code execution flaws patched in Cisco small business switches
• May 18, 2023 - Cisco Says PoC Exploits Available for Newly Patched Enterprise Switch Vulnerabilities
• May 18, 2023 - Cisco fixes critical flaws in Small Business Series Switches
• May 18, 2023 - Cisco switch firmware patched against critical bugs
• May 17, 2023 - Cisco warns of critical switch bugs with public exploit code

CVE-2023-30777

MEDIUM CVSS 6.10

Actively Exploited Remote Code Execution

Published: May 10, 2023

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.

Vendor Impacted: Advancedcustomfields

Product Impacted: Advanced Custom Fields

Quotes

• The Akamai SIG analyzed XSS attack data and identified attacks starting within 24 hours of the exploit PoC being made public
• Complete lack of effort to create a new exploit code
• This vulnerability allows any unauthenticated user from stealing sensitive information to, in this case, privilege escalation on the WordPress site by tricking privileged users to visit the crafted URL path. The described vulnerability was fixed in version 6.1.6, also fixed in version 5.12.6

Headlines

• May 16, 2023 - Hackers are attacking another serious WordPress security flaw - here's how to keep your site safe
• May 15, 2023 - WordPress Field Builder Plugin Vulnerability Exploited in Attacks Two Days After Patch
• May 15, 2023 - Hackers exploit WordPress vulnerability within hours of PoC exploit release
• May 14, 2023 - Hackers target Wordpress plugin flaw after PoC exploit released

CVE-2023-32784

CVSS Not Assigned

Actively Exploited Remote Code Execution Public Exploits Available

Published: May 15, 2023

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered. In 2.54, there is different API usage and/or random string insertion for mitigation.

Quotes

• No code execution on the target system is required, just a memory dump
• KeePass Master Password Dumper is a simple proof-of-concept tool used to dump the master password from KeePass's memory. Apart from the first password character, it is mostly able to recover the password in plaintext
• In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system
• The memory dump can be a KeePass process dump, swap file (pagefile.sys), hibernation file (hiberfil.sys), or RAM dump of the entire system. The first character cannot be recovered
• If your computer is already infected by malware that’s running in the background with the privileges of your user, this finding doesn’t make your situation much worse

Headlines

• May 19, 2023 - KeePass Flaw Exposes Master Passwords
• May 18, 2023 - KeePass Vulnerability Imperils Master Passwords
• May 18, 2023 - KeePass exploit helps retrieve cleartext master password, fix coming soon
• May 18, 2023 - KeePass 2.X Master Password Dumper allows retrieving the KeePass master password
• May 18, 2023 - PoC Tool Exploits Unpatched KeePass Vulnerability to Retrieve Master Passwords
• May 17, 2023 - KeePass flaw allows retrieval of master password, PoC is public (CVE-2023-32784)