{"id":8772,"date":"2020-11-23T13:16:09","date_gmt":"2020-11-23T20:16:09","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8772"},"modified":"2023-03-03T14:21:51","modified_gmt":"2023-03-03T21:21:51","slug":"october-patch-peek-digest","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/october-patch-peek-digest\/","title":{"rendered":"October 2020: Patch Watch Digest"},"content":{"rendered":"<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Dear Readers<\/strong>,<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">In this digest, we bring you the overall list of vulnerabilities &amp; weaknesses that were fixed in October.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 850px; height: 436px;\" src=\"\/wp-content\/uploads\/2022\/10\/october-digest-highlights.png\" alt=\"\" \/><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Key Highlights<\/strong><\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"#CISA\">CISA\u00a0has issued alerts for 47 vulnerabilities.<\/a><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"#Exploited CVEs\">Out of 1159 vulnerabilities, 65 CVEs were associated with Known exploits.<\/a><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"#Old CVEs\">Patches for 246 old vulnerabilities have released<\/a>.<\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"#Top 25 Chinese CVEs\">Top 25 CVEs Exploited by Chinese Sponsored Hackers<\/a>.<\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"#Microsoft Patch\">Microsoft has published patches for 87 vulnerabilities<\/a>.<\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><a href=\"#Oracle patches\">Oracle has released 402 bug fixes in the year\u2019s final batch update.<\/a><\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"Exploited CVEs\" name=\"Exploited CVEs\"><\/a>Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">In the October edition, we have a total of 65 CVEs that were correlated with known exploits. Out of 65 CVEs, 26 vulnerabilities are RCE bugs, that are not only critical but also easily exploitable. We found 16 CVEs linked with web app exploits, which are systematically targeted by the attackers.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 610px; height: 400px;\" src=\"\/wp-content\/uploads\/2022\/10\/analysis-of-weaponization.png\" alt=\"\" \/><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrTb2QIvo5sgR4h9?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 1: Weaponized Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"CISA\" name=\"CISA\"><\/a>CISA\u00a0has issued alerts for 47 vulnerabilities.<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Among the 47 CISA alerts, 25 were issued for the <a href=\"https:\/\/cybersecurityworks.com\/blog\/vulnerabilities\/top-25-exploited-vulnerabilities-by-chinese-sponsored-hackers.html\">Top 25 vulnerabilities<\/a> that are being exploited by the Chinese sponsored hackers. We analyzed and found that \u2013<\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">13 CVEs are rated critical, 14 has high severity, 18 with medium, and 2 of low severity.<\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">6 CVEs were associated with APT Groups.<\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">4 CVEs were mapped with 21 Ransomware families.<\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">20 CVEs are known to be weaponized vulnerabilities.<\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 750px; height: 450px;\" src=\"\/wp-content\/uploads\/2022\/10\/cisa-alerts-6.png\" alt=\"\" \/><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrSLuY01iMvdM7wq?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 2: CISA Alerts<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"Old CVEs\" name=\"Old CVEs\"><\/a>Old vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">As of October, patches for 246 Old vulnerabilities (ranging from 2010 to 2019)\u00a0 have been released. <a href=\"https:\/\/www.exploit-db.com\/exploits\/34504\">CVE-2010-2544<\/a>, <a href=\"https:\/\/www.exploit-db.com\/exploits\/35330\">CVE-2010-3272<\/a>, and <a href=\"https:\/\/www.exploit-db.com\/exploits\/12558\">CVE-2010-1922<\/a> are the oldest vulnerabilities that were patched by Check Point. Interestingly, these three vulnerabilities are associated with WEBAPP exploits with a CVSS V3 Score of 4.3 and 7.5.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 667px; height: 400px;\" src=\"\/wp-content\/uploads\/2022\/10\/old-vulnerabilities1-1.png\" alt=\"\" \/><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrs32Lw6CmhW95LY?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 3: Old Vulnerabilities<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Failing to fix old vulnerabilities that are more than a year will definitely put your organization at higher risk.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"Microsoft Patch\" name=\"Microsoft Patch\"><\/a>Microsoft October Patches\u00a0<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Microsoft has released patches for 87 vulnerabilities, including the wormable TCP\/IP with RCE bug. October Patch Tuesday vulnerabilities have been fixed now in which 6 CVEs were previously known to be publicly exploitable. In a total of 87 CVEs, 11 vulnerabilities were rated critical, 75 are high, and one is of medium severity.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><img decoding=\"async\" style=\"width: 700px; height: 447px;\" src=\"\/wp-content\/uploads\/2022\/10\/microsoft-patch-tuesday-fixes.png\" alt=\"\" \/><\/span><\/span><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrPYxki1eh8kamxx?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"Oracle patches\" name=\"Oracle patches\"><\/a>Oracle Patches <\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Oracle plugged <strong>402<\/strong> security bugs with the 2020\u2019s last batch of the patch update. We found that out of 402 vulnerabilities, <strong>82 CVEs<\/strong> are rated <strong>critical<\/strong>, in which two are ranked with a\u00a0 <strong>CVSS V3 Score of 10, <\/strong>and <strong>65 CVEs <\/strong>have CVSS V3 Score between <strong>9.4 and 9.8.<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><img decoding=\"async\" style=\"width: 800px; height: 480px;\" src=\"\/wp-content\/uploads\/2022\/10\/oracle-october-patch1.png\" alt=\"\" \/><\/strong><\/span><\/span><\/p>\n<p><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrxhAbVOX881ojHw?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><a id=\"Top 25 Chinese CVEs\" name=\"Top 25 Chinese CVEs\"><\/a>Top 25 CVEs Exploited by Chinese Sponsored Hackers<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Our security researchers analyzed these findings and had many interesting insights to share and came out with a multitude finding of these vulnerabilities. Out of these 25 CVE\u2019s that are targeted by Chinese Sponsored hackers (APT41 Group ). <a href=\"https:\/\/cybersecurityworks.com\/blog\/vulnerabilities\/top-25-exploited-vulnerabilities-by-chinese-sponsored-hackers.html\" target=\"_blank\" rel=\"noopener\">Click here to know more about these vulnerabilities.<\/a><\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>18 CVEs<\/strong> have <strong>Known exploits<\/strong><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>21 CVEs<\/strong> rank under Top 25 Common Weakness Enumeration <strong>(CWE)<\/strong><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>1 CVE<\/strong> is associated with <strong>Lazarus Malware<\/strong>\u00a0<\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>4 CVEs<\/strong> are associated with <strong>21 Ransomware Families<\/strong><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>12 CVEs<\/strong> with <strong>RCE capabilities<\/strong><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>3 CVEs<\/strong> with <strong>Privilege Execution<\/strong><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>6 CVEs<\/strong> are associated with <strong>APT Groups<\/strong><\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong><img decoding=\"async\" style=\"width: 613px; height: 400px;\" src=\"\/wp-content\/uploads\/2022\/10\/analysis-of-weaponization-piechart.png\" alt=\"\" \/><\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Significantly, CSW called out vulnerabilities CVE-2019-19781 and CVE-2019-11510 in our <a href=\"http:\/\/cybersecurityworks.com\/resources\/cyber-risk-series\/cyber-risk-in-remote-desktop.html\">Cyber Risk in<\/a>\u00a0<a href=\"http:\/\/cybersecurityworks.com\/resources\/cyber-risk-series\/cyber-risk-in-remote-desktop.html\">Remote Desktop\u00a0<\/a>and\u00a0<a href=\"http:\/\/cybersecurityworks.com\/resources\/cyber-risk-series\/cyber-risk-in-vpn.html\">Cyber Risk in VPN<\/a><u>,<\/u>\u00a0and warned about their association with with Revil and Sodinokibi Ransomware.\u00a0<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">The following\u00a0vulnerabilities are waiting to be weaponized so patching them today would be optimum for cyber hygiene.<\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr4OFToRypjTRcWB?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/p>\n<p><span style=\"font-size: 14px;\"><span style=\"font-family: verdana,geneva,sans-serif;\"><strong>Table 4:\u00a0Vulnerabilities Yet to be Weaponized<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">We recommend organizations to place an increased priority on patching the vulnerabilities that are being exploited routinely. Watch this space for more information and subscribe to our monthly digest to prioritize your patches.<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: verdana,geneva,sans-serif;\">Happy Patching<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dear Readers, In this digest, we bring you the overall list of vulnerabilities &amp; weaknesses that were fixed in October. Key Highlights CISA\u00a0has issued alerts for 47 vulnerabilities. Out of 1159 vulnerabilities, 65 CVEs were associated with Known exploits. Patches for 246 old vulnerabilities have released. Top 25 CVEs Exploited by Chinese Sponsored Hackers. Microsoft [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14443,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8772"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14443"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8772"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}