Vulnerability Trends September 2020

Vulnerability Trends Summary

As part of our monthly vulnerability trends, this report shows the monthly top 10 trends on security vulnerabilities and how hackers, malware, and exploit kits are exploiting those vulnerabilities. To demonstrate, we assign vulnerability trends value as a percentage of how each vulnerability is significantly gaining the attention of cyber security communities, attackers, together with malware. In either case, companies can benefit from the report to have more cyber threat insights and relatively anticipate attacks wave that might target their public assets in the following months.

Subscribe to the monthly vulnerability digest report by clicking here.

Download the full vulnerability digest report by clicking here.

The following chart shows the trends.

In September 2020, we see different types of vulnerabilities are reported with less exploitability in those vulnerabilities. The Bluetooth Man-in-the-Middle vulnerability, CVE-2020-15802, gained almost 20% of overall September trends.

We mention, as a note, that NTLM ZoroLogon is already reported in August Vulnerability Digest.

The following table shows the details of the trends.

Subscribe to the monthly vulnerability digest report by clicking here.

Download the full vulnerability digest report by clicking here.

1.CVE-2020-15802

Devices supporting Bluetooth before from 4.0 to 5.0 may allow man-in-the-middle attacks, known as BLURtooth. That might give unauthenticated user access to app or service on Bluetooth-powered devices like iOS and Android

2.CVE-2020-14386

A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes.

3.CVE-2020-16875

A remote code execution vulnerability exists in Microsoft Exchange server that allows remote authenticated attacker to run arbitrary code in the server.

4.CVE-2020-3569

Denial of Service in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it consume available memory and eventually crash.

5.CVE-2020-1968

A flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted communications sent over that TLS connection.

6.CVE-2020-13668

Drupal 8 and 9 have a reflected cross-site scripting (XSS) vulnerability under certain circumstances. An attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability

7.CVE-2020-2037

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges.

8.CVE-2020-24553

The CGI and FastCGI implementations in the Go standard library behave differently from the HTTP server implementation when serving content. This may lead to cross site scripting vulnerabilities even if uploaded data has been validated during upload.

9.CVE-2020-3495

A vulnerability in Cisco Jabber for Windows could allow an authenticated, remote attacker to execute arbitrary code. The vulnerability is due to improper validation of message contents.

10.CVE-2020-1013

An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. A remote attacker on the local network can launch a man-in-the-middle (MiTM) attack against the traffic passing between a domain controller and the target machine and gain elevated privileges on the target system