Het CSIRT-DSP maakt op wekelijkse basis een selectie van kwetsbaarheden, waarbij het CSIRT-DSP de inschatting heeft gemaakt dat deze relevant zijn voor digitale dienstverleners. Deze selectie wordt gezamenlijk met relevant nieuws verspreid in de Mid of Week.
De inschatting van low/medium/high wordt gemaakt op basis van de CVSS 3.1 base score van de kwetsbaarheid. 0.0-3.9 is low, 4.0-6.9 is medium, 7.0-10.0 is high.
Kwetsbaarheden die als low worden geclassificeerd komen niet in dit overzicht terug.
High
Rancher
https://nvd.nist.gov/vuln/detail/CVE-2021-25320 (9.9)
https://nvd.nist.gov/vuln/detail/CVE-2021-25318 (8.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-31999 (8.8)
Juniper Networks SBR Carrier
https://nvd.nist.gov/vuln/detail/CVE-2021-0276 (9.8)
Dell EMC OpenManage Enterprise
https://nvd.nist.gov/vuln/detail/CVE-2021-21564 (9.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-21596 (9.6)
https://nvd.nist.gov/vuln/detail/CVE-2021-21585 (9.1)
https://nvd.nist.gov/vuln/detail/CVE-2021-21584 (7.7)
https://www.dell.com/support/kbdoc/nl-nl/000189673/dsa-2021-113-dell-emc-openmanage-enterprise-and-dell-emc-openmanage-enterprise-modular-security-update-for-multiple-vulnerabilities
Juniper Networks Junos OS
https://nvd.nist.gov/vuln/detail/CVE-2021-0277 (8.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-0278 (8.8)
https://nvd.nist.gov/vuln/detail/CVE-2021-0280 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0282 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0283 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0284 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0285 (7.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0286 (7.5)
Juniper Networks Contrail Cloud
https://nvd.nist.gov/vuln/detail/CVE-2021-0279 (8.6)
Palo Alto Networks Cortex XDR Agent
https://nvd.nist.gov/vuln/detail/CVE-2021-3042 (7.8)
Microsoft Windows Print Spooler
https://nvd.nist.gov/vuln/detail/CVE-2021-34481 (7.8)
https://kb.cert.org/vuls/id/131152 (n/a)
Fortinet FortiManager / FortiAnalayzer
https://www.fortiguard.com/psirt/FG-IR-21-067 (7.7)
https://nvd.nist.gov/vuln/detail/CVE-2021-24022 (6.7)
Cisco ASA / FTD
https://nvd.nist.gov/vuln/detail/CVE-2021-1422 (7.7)
Palo Alto Networks Prisma Cloud
https://nvd.nist.gov/vuln/detail/CVE-2021-3043 (7.5)
Oracle VM VirtualBox
https://nvd.nist.gov/vuln/detail/CVE-2021-2454 (7.0)
Citrix ADC / Gateway / SD-WAN WANOP
https://support.citrix.com/article/CTX319135 (n/a)
Microsoft Windows
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 (n/a)
Zoho ManageEngine ADManager Plus
https://nvd.nist.gov/vuln/detail/CVE-2021-33911 (n/a)
https://nvd.nist.gov/vuln/detail/CVE-2021-36771 (n/a)
https://nvd.nist.gov/vuln/detail/CVE-2021-36772 (n/a)
Medium
Huawei ManageOne
https://www.huawei.com/en/psirt/security-advisories/2021/huawei-sa-20210714-01-pe-en (6.7)
Juniper Networks Junos OS
https://nvd.nist.gov/vuln/detail/CVE-2021-0287 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0288 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0289 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0290 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0291 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0292 (6.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0295 (6.1)
https://nvd.nist.gov/vuln/detail/CVE-2021-0281 (5.9)
https://nvd.nist.gov/vuln/detail/CVE-2021-0293 (5.5)
https://nvd.nist.gov/vuln/detail/CVE-2021-0294 (5.3)
containerd
https://nvd.nist.gov/vuln/detail/CVE-2021-32760 (5.0)
Bent u een digitale dienstverlener en wenst u onze complete Mid of Week te ontvangen? Dan kunt u per e-mail uw aanmelding doorgeven. Vermeld hierbij het e-mailadres waar u de Mid of Week op wenst te ontvangen.