{"id":8337,"date":"2022-08-03T10:11:50","date_gmt":"2022-08-03T10:11:50","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8337"},"modified":"2023-02-17T13:29:10","modified_gmt":"2023-02-17T20:29:10","slug":"dhs-cisa-kevs-weekly-edition-13-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/dhs-cisa-kevs-weekly-edition-13-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 13: Patch Before you Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">Every week, we bring to you the CVEs that need to be patched, as recommended by CISA. This week, there is only one CVE (CVE-2022-22047) which needs to be patched by the 2nd of August 2022. Our team has analyzed this CVE and here are the findings:<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 552px;\" src=\"\/wp-content\/uploads\/2022\/09\/microsoft-infographic-1.png\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">This CVE, discovered in 2022, is found in Windows\u00a0 Client Server Runtime Subsystem (CSRSS) and can be used to execute code remotely. It arises due to an improper privilege management flaw (CWE-269). This was discovered as a zero-day vulnerability and a patch was made available on Microsoft\u2019s Patch Tuesday.<\/p>\n<p dir=\"ltr\">Recently, this CVE was exploited by the PSOA Knotweed with a special spyware kit, SubZero. If exploited, it could lead to complete take-over of the system and information. Hence, Microsoft has urged all its Windows CSRSS users to patch this vulnerability immediately.<\/p>\n<p dir=\"ltr\">For more information on the Knotweed incident, check out our\u00a0<a href=\"https:\/\/cybersecurityworks.com\/blog\/cyber-risk\/csws-threat-intelligence-july-25-2022-july-29-2022.html#KnotWeed%20attacks%20European%20and%20Central%20American%20targets%20using%20zero-day%20exploits\" target=\"_blank\" rel=\"noopener\">weekly threat blog<\/a>.<\/p>\n<p dir=\"ltr\">This CVE has no known ransomware or APT group associations.<\/p>\n<p>&nbsp;<\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrO0kc3vS1LrupYE?backgroundColor=blue&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\" style=\"text-align: center;\"><strong>Table: DHS CISA KEVs<\/strong><\/p>\n<p dir=\"ltr\">\n<p dir=\"ltr\">Also, check out our blog on the <a href=\"https:\/\/cybersecurityworks.com\/blog\/cisa\/cisa-releases-a-directive-asking-organizations-to-patch-known-exploited-vulnerabilities.html\" target=\"_blank\" rel=\"noopener\">CISA directives<\/a> for the month of August, 2022.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Every week, we bring to you the CVEs that need to be patched, as recommended by CISA. This week, there is only one CVE (CVE-2022-22047) which needs to be patched by the 2nd of August 2022. Our team has analyzed this CVE and here are the findings: This CVE, discovered in 2022, is found in [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,289,290,288,291],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8337"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8337"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}