{"id":50154,"date":"2022-05-16T09:40:25","date_gmt":"2022-05-16T01:40:25","guid":{"rendered":"https:\/\/version-2.com\/?p=50154"},"modified":"2022-05-30T10:42:09","modified_gmt":"2022-05-30T02:42:09","slug":"looking-into-cisas-top-15-routinely-exploited-vulnerabilities","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2022\/05\/looking-into-cisas-top-15-routinely-exploited-vulnerabilities\/","title":{"rendered":"Looking Into CISA\u2019s Top 15 Routinely Exploited Vulnerabilities"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\"\"<\/p>\n

On April 27, the Cybersecurity and Infrastructure Security Agency (CISA), published a joint advisory<\/span><\/a> in collaboration with CSA\/NSA\/FBI\/ACSC and other cybersecurity authorities, providing details on the top 15 vulnerabilities routinely exploited by threat actors in 2021,and other CVEs frequently exploited.<\/p>\n

<\/p>

<\/div>

<\/p>\n

Nine of the top 15 routinely exploited flaws were remote code execution vulnerabilities, followed by two privilege escalation weaknesses, potentially allowing threat actors to remotely take over systems. <\/p>\n

Unpatched devices and systems can serve as an easy network entry point for threat actors, as they provide attackers with a reliable and efficient Initial Access method. A number of these vulnerabilities were seen as a part of ransomware attack vectors, one of today\u2019s top threats to operational technology.<\/p>\n

Many of these vulnerabilities share characteristics that make them widely exploitable: They affect widely used systems, where the vulnerability can be present in multiple systems.<\/p>\n

In the past year, threat actors targeted internet-facing systems, such as email servers and VPN servers, with exploits of newly disclosed vulnerabilities. For most of the top exploited vulnerabilities, a proof of concept code was released within two weeks of the vulnerability\u2019s disclosure. (Read more about when to patch or not patch, here<\/span><\/a>).  <\/p>\n

Malicious threat actors continued exploiting publicly known vulnerabilities, demonstrating the continued risk to organizations that fail to patch software in a timely manner or are using software that is no longer supported by a vendor.<\/p>\n

The Top 15 Routinely Exploited Vulnerabilities<\/h2>\n

The top vulnerabilities detail how threat actors exploited newly disclosed vulnerabilities in popular services, aiming to create a massive and extended impact on organizations.<\/p>\n

Nine of the top 15 routinely exploited flaws were remote code execution vulnerabilities, followed by two privilege escalation weaknesses.<\/p>\n

Following are the most exploited vulnerabilities:<\/p>\n