{"id":8357,"date":"2022-07-01T10:48:06","date_gmt":"2022-07-01T10:48:06","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8357"},"modified":"2023-02-17T13:24:31","modified_gmt":"2023-02-17T20:24:31","slug":"dhs-cisa-kevs-weekly-edition-9-patch-before-you-hit-the-deadline","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/dhs-cisa-kevs-weekly-edition-9-patch-before-you-hit-the-deadline\/","title":{"rendered":"DHS CISA KEVs Weekly Edition 9: Patch Before you Hit the Deadline"},"content":{"rendered":"<p dir=\"ltr\">Following a cyber attack on MITEL VOIP, the CISA added 8 new CVEs too their KEVs list on June 27th 2022. There are now 787 CVEs on the list. They come recommended with a patch-by date and in this blog we will be taking a look at the CVEs with patch due date falling between (June 27 to July 3, 2022).<\/p>\n<p>We analyzed the CISA Known Exploited Vulnerabilities (KEVs) and found that &#8211;<\/p>\n<p><img decoding=\"async\" style=\"width: 750px; height: 405px;\" src=\"\/wp-content\/uploads\/2022\/10\/dhs-cisa-kevs.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">How Far Back Do They Go?<\/h2>\n<p>Of the 3 KEVs, 2 vulnerabilities have been around since 2016 and one since 2021.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 538px;\" src=\"\/wp-content\/uploads\/2022\/10\/year-wise-breakdown.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Which Vendors Are Affected?<\/h2>\n<p dir=\"ltr\">CVEs with a patch deadline of June 30, 2022 are associated with SAP and in particular, the Netweaver.<\/p>\n<p dir=\"ltr\"><img decoding=\"async\" style=\"width: 550px; height: 473px;\" src=\"\/wp-content\/uploads\/2022\/10\/vendors-affected-2.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Severity Scores<\/h2>\n<p dir=\"ltr\">The CVSS severity scores vary from medium to critical.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 485px;\" src=\"\/wp-content\/uploads\/2022\/10\/severity-scores-1.png\" alt=\"\" \/><\/p>\n<h2 dir=\"ltr\">Software Weaknesses<\/h2>\n<p>The following CWEs are associated with a number of vulnerabilities that need to be patched this week.<\/p>\n<p><img decoding=\"async\" style=\"width: 550px; height: 378px;\" src=\"\/wp-content\/uploads\/2022\/10\/software-weaknesses.png\" alt=\"\" \/><br \/>\n<iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrK1kBT8iZdscdFX?backgroundColor=green&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p dir=\"ltr\">\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Table: DHS CISA KEVs<\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\">If your organization uses SAP Netweaver, we recommend that you immediately patch the above listed CVEs as they are highly susceptible to attacks.<\/p>\n<p dir=\"ltr\">Every week, we will be providing you with the list of CVEs that need to be patched based on the CISA KEV list.<\/p>\n<p dir=\"ltr\">Keep watching <a href=\"https:\/\/cybersecurityworks.com\/patchwatch\/\">this space<\/a> for updates.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Following a cyber attack on MITEL VOIP, the CISA added 8 new CVEs too their KEVs list on June 27th 2022. There are now 787 CVEs on the list. They come recommended with a patch-by date and in this blog we will be taking a look at the CVEs with patch due date falling between [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14436,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[287,289],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8357"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14436"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8357"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8357"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}