{"id":8787,"date":"2020-10-29T13:36:08","date_gmt":"2020-10-29T20:36:08","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=patch_watch&#038;p=8787"},"modified":"2023-03-07T14:51:37","modified_gmt":"2023-03-07T21:51:37","slug":"oct-14-patch-watch-security-updates","status":"publish","type":"patch_watch","link":"https:\/\/10.42.32.162\/patch_watch\/oct-14-patch-watch-security-updates\/","title":{"rendered":"Oct 14: Patch Watch &#038; Security Updates"},"content":{"rendered":"<p><span style=\"color: #000000; font-family: tahoma, geneva, sans-serif;\"><span style=\"font-size: 16px;\"><b>In this issue we have &#8211;<\/b><\/span><\/span><\/p>\n<ul>\n<li><a href=\"#Microsoft plugged 87 bug fixes\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>Microsoft has released patches for 87 bugs (11 are rated critical)<\/strong><\/span><\/span><\/a><\/li>\n<li dir=\"ltr\">\n<p dir=\"ltr\" role=\"presentation\"><a href=\"#Our analysis of the 202 patched vulnerabilities shows us that there are -\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><b id=\"docs-internal-guid-84c260f5-7fff-c751-9ccb-1d59ba472874\">CISCO, Citrix, Dell, IBM, Check Point, NetApp and other vendors have released patches for 202 vulnerabilities (11 vulnerabilities are already weaponized)<\/b><\/span><\/span><\/a><\/p>\n<\/li>\n<li dir=\"ltr\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><b id=\"docs-internal-guid-84c260f5-7fff-c751-9ccb-1d59ba472874\"><a href=\"#(APT41)\">CERT has issued a warning for 25 vulnerabilities exploited by APT41 and sponsored by the Chinese state. It\u2019s essential to patch these immediately.<\/a>\u00a0<\/b><\/span><\/span><\/p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" style=\"width: 1000px; height: 563px; float: left;\" src=\"\/wp-content\/uploads\/2022\/10\/patchwatch-highlights2-corrected.png\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p dir=\"ltr\" role=\"presentation\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><b id=\"docs-internal-guid-84c260f5-7fff-c751-9ccb-1d59ba472874\">1. <a id=\"Microsoft plugged 87 bug fixes\" name=\"Microsoft plugged 87 bug fixes\"><\/a>Microsoft plugged 87 bug fixes &#8211;\u00a0<\/b><\/span><\/span><\/p>\n<ul>\n<li dir=\"ltr\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">11 vulnerabilities were<b> <\/b>rated critical, 75 are high, and one is of medium severity.\u00a0<\/span><\/span><\/span><\/p>\n<\/li>\n<li dir=\"ltr\">\n<p dir=\"ltr\" role=\"presentation\"><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">These<b>\u00a0<\/b>patched<b> <\/b>vulnerabilities include<b> <\/b>wormable TCP\/IP with RCE flaws.\u00a0<\/span><\/span><\/span><\/p>\n<\/li>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">None of these fixed vulnerabilities are currently being exploited, though six of them were previously publicly known.<\/span><\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"color: #000000;\"><img decoding=\"async\" style=\"width: 430px; height: 334px;\" src=\"\/wp-content\/uploads\/2022\/10\/untitled.png\" alt=\"\" \/><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrWvqTwbDaokMFRE?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/span><\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>Table 1:<\/strong>\u00a0<strong>Microsoft\u2019s 11 critical vulnerabilities and their fixes<\/strong><\/span><\/span><\/span><\/p>\n<p><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><span style=\"color: #000000;\">2. <\/span><a id=\"Our analysis of the 202 patched vulnerabilities shows us that there are -\" name=\"Our analysis of the 202 patched vulnerabilities shows us that there are -\"><\/a><span style=\"color: #000000;\">Our analysis of the <strong>202<\/strong> patched vulnerabilities shows us that there are &#8211;<\/span><\/span><\/span><\/p>\n<ul>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>54<\/strong> Hotfixes, <strong>17<\/strong> Patches and, <strong>131<\/strong> Updates in this week<\/span><\/span><\/span><\/li>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>191 <\/strong>vulnerabilities are yet to be weaponized.<\/span><\/span><\/span><\/li>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>11<\/strong> vulnerabilities have known exploits and are weaponized.<\/span><\/span><\/span><\/li>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>5 CVE\u2019s <\/strong>are associated with <strong>Remote Code Evaluation (RCE<\/strong>) and allows attackers to execute arbitrary code with elevated privileges.<\/span><\/span><\/span><\/li>\n<\/ul>\n<p><img decoding=\"async\" style=\"width: 490px; height: 302px;\" src=\"\/wp-content\/uploads\/2022\/10\/picture2.png\" alt=\"\" \/><\/p>\n<ul>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>Incidentally 5 CVEs from Checkpoint that <\/strong>have <strong>WEBAPP<\/strong> exploits have been fixed. Command injection flaws are often exploited by threat actors therefore patching these would be optimum.<\/span><\/span><\/span><\/li>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">CVE-2020-14028 has <strong>Privilege Execution capabilities<\/strong> in which attackers can gain elevated access to\u00a0resources\u00a0that are typically protected. <a href=\"https:\/\/www.checkpoint.com\/defense\/advisories\/public\/2020\/cpai-2020-0910.html\">Click here for the patch<\/a>.<\/span><\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>3.<a id=\"This week only 3 CVEs are old vulnerabilities\" name=\"This week only 3 CVEs are old vulnerabilities\"><\/a> This week only 3 CVEs <\/strong>are old vulnerabilities (out of 202), ranging from <strong>2018<\/strong> and <strong>2019.<\/strong><\/span><\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><span style=\"color: #000000;\">\u00a0<\/span><a href=\"https:\/\/github.com\/alt3kx\/CVE-2018-12463\"><span style=\"color: #0000ff;\">CVE-2018-12463<\/span><\/a> <span style=\"color: #000000;\">is a web app exploit with a CVSS Score of 7.5 rating High severity.<\/span><\/span><\/span><\/li>\n<li><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">CVE-2019-19242 is a vulnerability in IBM Security Guardium with a CVSS v3 score of 5.9.<\/span><\/span><\/li>\n<li><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">CVE-2019-19705 is a vulnerability that exists in Realtek HD Audio Driver Package (deployed on PCs containing Realtek sound cards).<\/span><\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">4.\u00a0<a id=\"(APT41)\" name=\"(APT41)\"><\/a><strong>25<\/strong> <strong>vulnerabilities<\/strong> have been exploited by intruding more than <strong>100<\/strong> companies across the world, ranging from software vendors, video gaming companies, telcos, and more. A group of five hackers <strong>(APT41)<\/strong> sponsored by the <strong>Chinese state<\/strong> has been accused and filed charges by the US Government.<\/span><\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrZIOPQRB4hlvTqL?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/span><\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>Table 2:<\/strong> <strong>25 Vulnerabilities Exploited by\u00a0<\/strong><strong>(APT41) Group<\/strong><\/span><\/span><\/span><\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">In recent weeks, each vendor has been keeping a watchful eye on their flaws and have been releasing updates to ensure they are patched before they get weaponized. You can download all weaponized vulnerabilities that we have summarized above and patch them immediately.<\/span><\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shrDPiXCo3Csg9mcc?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/span><\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>Table 3:<\/strong>\u00a0<strong>Weaponized Vulnerabilities<\/strong><\/span><\/span><\/span><\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">Vulnerabilities that are trending today were once overlooked and their patches missed. Today, the same vulnerabilities are being exploited to deliver ransomware and malware. Weaponized or not, it\u2019s essential to cyber hygiene to patch all vulnerabilities.<\/span><\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><iframe class=\"airtable-embed\" style=\"background: transparent; border: 1px solid #ccc;\" src=\"https:\/\/airtable.com\/embed\/shr1oQTgzo5AjAEGc?backgroundColor=purple&amp;viewControls=on\" width=\"100%\" height=\"533\" frameborder=\"0\"><\/iframe><\/span><\/span><\/span><\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\"><strong>Table 4:<\/strong>\u00a0<strong>Vulnerabilities yet to be Weaponized<\/strong><\/span><\/span><\/span><\/p>\n<p><span style=\"color: #000000;\"><span style=\"font-size: 16px;\"><span style=\"font-family: tahoma,geneva,sans-serif;\">Happy Patching!<\/span><\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this issue we have &#8211; Microsoft has released patches for 87 bugs (11 are rated critical) CISCO, Citrix, Dell, IBM, Check Point, NetApp and other vendors have released patches for 202 vulnerabilities (11 vulnerabilities are already weaponized) CERT has issued a warning for 25 vulnerabilities exploited by APT41 and sponsored by the Chinese state. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":14453,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"patch_category":[],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch\/8787"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_watch"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/patch_watch"}],"author":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/users\/1"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/14453"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=8787"}],"wp:term":[{"taxonomy":"patch_category","embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/patch_category?post=8787"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}