{"id":8054,"date":"2025-03-04T06:27:20","date_gmt":"2025-03-04T06:27:20","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/cisa-warns-of-actively-exploited-flaws\/"},"modified":"2025-03-04T06:27:22","modified_gmt":"2025-03-04T06:27:22","slug":"cisa-warns-of-actively-exploited-flaws","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/cisa-warns-of-actively-exploited-flaws\/","title":{"rendered":"CISA Warns of Actively Exploited Flaws"},"content":{"rendered":"\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">Mar 04, 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">The Hacker News<\/span><\/span><span class=\"p-tags\">Cyber Attack \/ Vulnerability<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\">\n<a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh-puL2ryQoX3p90P7Cymt22EgaiRR07Q0MEyuHt65dm4gYfugSYTjT7hAg1iX2roiSx82-m8vzNFh3vMwk6sbw1pZO1VwKhjMdfxYZJiaysEX1-Qy6jVvVPnPjY1hQrXVz4ttM_emAfXvpHA5IhdJo3beh1UvaHStQpnqKOY6yhaeSbHUum4RCvyrUcmw\/s728-rw-e365\/cisa-update.png\" style=\"clear: left; display: block; float: left;  text-align: center;\" rel=\"nofollow noopener\" target=\"_blank\"><\/p>\n<p><\/a>\n<\/div>\n<p>The United States Cybersecurity and Infrastructure Security Agency (CISA) has added five new security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, after discovering evidence of active exploitation. These vulnerabilities affect software from prominent companies including Cisco, Hitachi Vantara, Microsoft Windows, and Progress WhatsUp Gold.<\/p>\n<p>The list of newly added vulnerabilities is as follows:<\/p>\n<ul>\n<li><strong><a href=\"https:\/\/sec.cloudapps.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-sbr042-multi-vuln-ej76Pke5\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2023-20118<\/a><\/strong> (CVSS score: 6.5) &#8211; This command injection vulnerability affects the web-based management interface of Cisco Small Business RV Series routers. It allows an authenticated, remote attacker to gain root-level privileges and access unauthorized data. This vulnerability remains unpatched due to the routers having reached their end-of-life status.<\/li>\n<li><strong><a href=\"https:\/\/support.pentaho.com\/hc\/en-us\/articles\/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorization-Decisions-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43939\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2022-43939<\/a><\/strong> (CVSS score: 8.6) &#8211; An authorization bypass vulnerability in Hitachi Vantara Pentaho BA Server that arises from the use of non-canonical URL paths for authorization decisions. This vulnerability was fixed in August 2024 with the release of versions 9.3.0.2 and 9.4.0.1.<\/li>\n<li><strong><a href=\"https:\/\/support.pentaho.com\/hc\/en-us\/articles\/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43769\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2022-43769<\/a><\/strong> (CVSS score: 8.8) &#8211; A special element injection vulnerability in Hitachi Vantara Pentaho BA Server that allows an attacker to inject Spring templates into properties files, resulting in arbitrary command execution. This vulnerability was also fixed in August 2024 with versions 9.3.0.2 and 9.4.0.1.<\/li>\n<li><strong><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/advisory\/CVE-2018-8639\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2018-8639<\/a><\/strong> (CVSS score: 7.8) &#8211; An improper resource shutdown or release vulnerability in Microsoft Windows Win32k, allowing for local, authenticated privilege escalation and running arbitrary code in kernel mode. This vulnerability was fixed in December 2018.<\/li>\n<li><strong><a href=\"https:\/\/community.progress.com\/s\/article\/WhatsUp-Gold-Security-Bulletin-June-2024\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2024-4885<\/a><\/strong> (CVSS score: 9.8) &#8211; A path traversal vulnerability in Progress WhatsUp Gold that enables an unauthenticated attacker to achieve remote code execution. This vulnerability was fixed in version 2023.1.3 in June 2024.<\/li>\n<\/ul>\n<div class=\"dog_two clear\"><center class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/cloud-ai-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\" title=\"Cybersecurity\"><img fetchpriority=\"high\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiSCOAe1VcPqudCfDCPhh-g5wBvLsaz_frXFhGVPG_yPr-e-Y_9oqVjzAuW5Ywuspn_7ZQvCAWhx52iofUIHBwjMusM5C199AJ9njiV0nZygnKwYRTbPVixr-TfhyphenhyphenbuqiL9VuAgl2xAY1ky_f9u-wiRWvA_KJiVnnGA9DZE3qBFjpIOrpNAFqvyMMfAcbEh\/s728-e100\/cloud-ai-d.jpg\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>While there is limited information on how some of these vulnerabilities are being exploited in the wild, the French cybersecurity company Sekoia has recently reported that threat actors are abusing <a href=\"https:\/\/thehackernews.com\/2025\/02\/polaredge-botnet-exploits-cisco-and.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2023-20118<\/a> to recruit susceptible routers into a botnet known as PolarEdge.<\/p>\n<p>Regarding <a href=\"https:\/\/thehackernews.com\/2024\/08\/critical-security-flaw-in-whatsup-gold.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2024-4885<\/a>, the Shadowserver Foundation has observed exploitation attempts targeting this vulnerability as of August 1, 2024. Data from GreyNoise indicates that at least eight unique IP addresses from various countries, including Hong Kong, Russia, Brazil, South Korea, and the United Kingdom, are linked to the malicious exploitation of this vulnerability.<\/p>\n<p>Given the active exploitation of these vulnerabilities, Federal Civilian Executive Branch (FCEB) agencies are advised to apply the necessary mitigations by March 24, 2025, to secure their networks.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">This article has been contributed by one of our valued partners. If you found it interesting, please follow us on <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener nofollow\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener nofollow\" target=\"_blank\">LinkedIn<\/a> for more exclusive content.<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/03\/cisco-hitachi-microsoft-and-progress.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue802Mar 04, 2025\ue804The Hacker NewsCyber Attack \/ Vulnerability The United States Cybersecurity and Infrastructure Security Agency (CISA) has added five new security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog,&#8230;<\/p>\n","protected":false},"author":19,"featured_media":8055,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-8054","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/03\/cisa-update.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/8054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=8054"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/8054\/revisions"}],"predecessor-version":[{"id":8056,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/8054\/revisions\/8056"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/8055"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=8054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=8054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=8054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}