Het CSIRT-DSP maakt op wekelijkse basis een selectie van kwetsbaarheden, waarbij het CSIRT-DSP de inschatting heeft gemaakt dat deze relevant zijn voor digitale dienstverleners. Deze selectie wordt gezamenlijk met relevant nieuws verspreid in de Mid of Week.
De inschatting van low/medium/high wordt gemaakt op basis van de CVSS 3.1 base score van de kwetsbaarheid. 0.0-3.9 is low, 4.0-6.9 is medium, 7.0-10.0 is high.
Kwetsbaarheden die als low worden geclassificeerd komen niet in dit overzicht terug.
High
Microsoft Windows Hyper-V
https://nvd.nist.gov/vuln/detail/CVE-2021-28476 (9.9)
Cisco HyperFlex HX
https://nvd.nist.gov/vuln/detail/CVE-2021-1498 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1497 (9.8)
VMWare vRealize Business for Cloud
https://nvd.nist.gov/vuln/detail/CVE-2021-21984 (9.8)
Cisco SD-WAN
https://nvd.nist.gov/vuln/detail/CVE-2021-1275 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1508 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1506 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1505 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1468 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1284 (8.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-1511 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-1510 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-1509 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-1513 (7.5)
Microsoft Exchange Server
https://nvd.nist.gov/vuln/detail/CVE-2021-31198 (7.8)
Microsoft Windows Container Manager Service
https://nvd.nist.gov/vuln/detail/CVE-2021-31208 (7.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-31169 (7.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-31168 (7.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-31167 (7.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-31165 (7.8)
OpenSUSE Factory VirtualBox
https://nvd.nist.gov/vuln/detail/CVE-2021-25319 (7.8)
Microsoft Windows RDP
https://nvd.nist.gov/vuln/detail/CVE-2021-31186 (7.4)
Cisco AnyConnect Secure Mobility Client
https://nvd.nist.gov/vuln/detail/CVE-2021-1496 (7.0)
https://nvd.nist.gov/vuln/detail/CVE-2021-1430 (7.0)
https://nvd.nist.gov/vuln/detail/CVE-2021-1429 (7.0)
https://nvd.nist.gov/vuln/detail/CVE-2021-1428 (7.0)
https://nvd.nist.gov/vuln/detail/CVE-2021-1427 (7.0)
https://nvd.nist.gov/vuln/detail/CVE-2021-1426 (7.0)
Solarwinds Serv-U
https://nvd.nist.gov/vuln/detail/CVE-2021-32604 (n/a)
Citrix Workspace App (Windows)
https://support.citrix.com/article/CTX307794 (n/a)
Medium
Microsoft Exchange Server
https://nvd.nist.gov/vuln/detail/CVE-2021-31195 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-31207 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-31209 (6.5)
Cisco SD-WAN
https://nvd.nist.gov/vuln/detail/CVE-2021-1507 (6.4)
https://nvd.nist.gov/vuln/detail/CVE-2021-1486 (5.3)
https://nvd.nist.gov/vuln/detail/CVE-2021-1535 (5.3)
https://nvd.nist.gov/vuln/detail/CVE-2021-1514 (4.4)
https://nvd.nist.gov/vuln/detail/CVE-2021-1512 (4.4)
https://nvd.nist.gov/vuln/detail/CVE-2021-1515 (4.3)
Fortinet FortiNAC
https://nvd.nist.gov/vuln/detail/CVE-2021-24011 (6.3)
HPE iLO Amplifier Pack
https://nvd.nist.gov/vuln/detail/CVE-2021-26583 (6.0)
Cisco HyperFlex HX
https://nvd.nist.gov/vuln/detail/CVE-2021-1499 (5.3)
Cisco AnyConnect Secure Mobility Client
https://nvd.nist.gov/vuln/detail/CVE-2021-1519 (4.7)
Microsoft Windows SMB
https://nvd.nist.gov/vuln/detail/CVE-2021-31205 (4.3)
Red Hat OpenStack tripleo-ansible
https://nvd.nist.gov/vuln/detail/CVE-2021-31918 (n/a)
Bent u een digitale dienstverlener en wenst u onze complete Mid of Week te ontvangen? Dan kunt u per e-mail uw aanmelding doorgeven. Vermeld hierbij het e-mailadres waar u de Mid of Week op wenst te ontvangen.