Het CSIRT-DSP maakt op wekelijkse basis een selectie van kwetsbaarheden, waarbij het CSIRT-DSP de inschatting heeft gemaakt dat deze relevant zijn voor digitale dienstverleners. Deze selectie wordt gezamenlijk met relevant nieuws verspreid in de Mid of Week.
De inschatting van low/medium/high wordt gemaakt op basis van de CVSS 3.1 base score van de kwetsbaarheid. 0.0-3.9 is low, 4.0-6.9 is medium, 7.0-10.0 is high.
Kwetsbaarheden die als low worden geclassificeerd komen niet in dit overzicht terug.
High
Aruba Clearpass Policy Manager
https://nvd.nist.gov/vuln/detail/CVE-2021-29145 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-29139 (8.4)
https://nvd.nist.gov/vuln/detail/CVE-2021-29146 (8.4)
https://nvd.nist.gov/vuln/detail/CVE-2021-29142 (8.4)
https://nvd.nist.gov/vuln/detail/CVE-2021-29140 (8.2)
https://nvd.nist.gov/vuln/detail/CVE-2020-7123 (7.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-29138 (7.6)
https://nvd.nist.gov/vuln/detail/CVE-2021-29147 (7.3)
https://nvd.nist.gov/vuln/detail/CVE-2021-29141 (7.1)
https://nvd.nist.gov/vuln/detail/CVE-2021-29144 (7.1)
Aruba Airwave Management Platform
https://nvd.nist.gov/vuln/detail/CVE-2021-25167 (8.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-25166 (8.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-25147 (8.1)
https://nvd.nist.gov/vuln/detail/CVE-2021-25163 (8.1)
https://nvd.nist.gov/vuln/detail/CVE-2021-25151 (7.2)
https://nvd.nist.gov/vuln/detail/CVE-2021-25152 (7.2)
F5 BIG-IP
https://support.f5.com/csp/article/K74151369 (8.7)
https://support.f5.com/csp/article/K51213246 (8.1)
https://support.f5.com/csp/article/K04234247 (7.9)
https://support.f5.com/csp/article/K90603426 (7.5)
https://support.f5.com/csp/article/K18570111 (7.5)
Cisco ASA / FTD
https://nvd.nist.gov/vuln/detail/CVE-2021-1445 (8.6)
https://nvd.nist.gov/vuln/detail/CVE-2021-1402 (8.6)
https://nvd.nist.gov/vuln/detail/CVE-2021-1504 (8.6)
https://nvd.nist.gov/vuln/detail/CVE-2021-1501 (8.6)
https://nvd.nist.gov/vuln/detail/CVE-2021-1493 (8.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-1448 (7.8)
BIND
https://nvd.nist.gov/vuln/detail/CVE-2021-25216 (8.1)
https://nvd.nist.gov/vuln/detail/CVE-2021-25215 (7.5)
Exim
https://www.openwall.com/lists/oss-security/2021/05/04/6 (n/a)
Aviatrix VPN Client
https://nvd.nist.gov/vuln/detail/CVE-2021-31776 (n/a)
Medium
Cisco ASA / FTD
https://nvd.nist.gov/vuln/detail/CVE-2021-1488 (6.7)
https://nvd.nist.gov/vuln/detail/CVE-2021-1476 (6.7)
https://nvd.nist.gov/vuln/detail/CVE-2021-1256 (6.0)
https://nvd.nist.gov/vuln/detail/CVE-2021-1495 (5.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1369 (5.4)
https://nvd.nist.gov/vuln/detail/CVE-2021-1489 (4.9)
https://nvd.nist.gov/vuln/detail/CVE-2021-1458 (4.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1457 (4.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1456 (4.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1455 (4.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1477 (4.3)
BIND
https://nvd.nist.gov/vuln/detail/CVE-2021-25214 (6.5)
Aruba Airwave Management Platform
https://nvd.nist.gov/vuln/detail/CVE-2021-25153 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-29137 (6.1)
https://nvd.nist.gov/vuln/detail/CVE-2021-25154 (5.9)
https://nvd.nist.gov/vuln/detail/CVE-2021-25165 (5.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-25164 (5.5)
Oracle VM Virtualbox
https://nvd.nist.gov/vuln/detail/CVE-2021-2321 (6.0)
F5 BIG-IP
https://support.f5.com/csp/article/K10751325 (5.9)
https://support.f5.com/csp/article/K05300051 (5.9)
https://support.f5.com/csp/article/K75540265 (5.3)
https://support.f5.com/csp/article/K23203045 (4.3)
Huawei CloudEngine
https://nvd.nist.gov/vuln/detail/CVE-2021-22332 (5.3)
https://nvd.nist.gov/vuln/detail/CVE-2021-22393 (4.3)
Bent u een digitale dienstverlener en wenst u onze complete Mid of Week te ontvangen? Dan kunt u per e-mail uw aanmelding doorgeven. Vermeld hierbij het e-mailadres waar u de Mid of Week op wenst te ontvangen.