February 17, 2023 By Pierluigi Paganini
US CISA added actively exploited flaws in Cacti framework, Microsoft Office, Windows, and iOS to its Known Exploited Vulnerabilities Catalog.
US CISA added the following actively exploited flaws to its Known Exploited Vulnerabilities Catalog:
CVE-2022-46169 – Cacti is an open-source platform that provides a robust and extensible operational monitoring and fault management framework for users. The flaw is a command injection vulnerability that can be exploited by an unauthenticated user to execute arbitrary code on a server running Cacti, if a specific data source was selected for any monitored device. The flaw resides in the `remote_agent.php` file that can be accessed by any unauthenticated user. The vulnerability affects versions 1.2.22 and below.
CISA orders federal agencies to fix this vulnerability by March 9, 2023.
CVE-2023-21715 – The flaw is a Microsoft Office Publisher security feature bypass vulnerability.
“Microsoft Office Publisher contains a security feature bypass vulnerability which allows for a local, authenticated attack on a targeted system” state the description published by CISA.
CVE-2023-23376 – The flaw is a Windows common log file system driver elevation of privilege vulnerability. An attacker can exploit this vulnerability to gain SYSTEM privileges.
CVE-2023-21823 – The vulnerability is a Windows Graphics Component remote code execution issue.
“An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.” reads the advisory published by Microsoft.
The above flaws in Microsoft products have been addressed with the release of Patch Tuesday security updates for February 2023 and CISA orders federal agencies to fix them by March 7, 2023.
CVE-2023-23529 – The vulnerability is a type confusion issue in WebKit that was addressed by the IT giant with improved checks. The flaw impacts iOS, iPadOS, and macOS.