CISA Adds Four Known Exploited Vulnerabilities to Catalog

🗓️ 11 Feb 2025 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 5 Views

CISA adds four known exploited vulnerabilities to the catalog, including Zyxel DSL and Windows flaws.

Reporter	Title	Published	Views	Family All 104
ATTACKERKB	CVE-2024-40891	4 Feb 202500:00	–	attackerkb
ATTACKERKB	CVE-2024-40890	4 Feb 202500:00	–	attackerkb
ATTACKERKB	CVE-2025-21418	11 Feb 202500:00	–	attackerkb
ATTACKERKB	CVE-2025-21391	11 Feb 202500:00	–	attackerkb
Information Security Automation	February Microsoft Patch Tuesday	12 Feb 202522:01	–	avleonov
Information Security Automation	March episode “In the Trend of VM” (#13): vulnerabilities of Microsoft, PAN-OS, СommuniGate and who should patch hosts with deployed application	22 Apr 202512:51	–	avleonov
BDU FSTEC	The vulnerability of Zyxel network device software of the CPE series exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.	30 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Zyxel network device software of the CPE series exists due to the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.	11 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the driver for auxiliary functions of the Winsock application programming interface on Windows operating systems allows a hacker to elevate their privileges to the SYSTEM level.	12 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Storage component in Windows operating systems allows attackers to enhance their privileges.	28 Feb 202500:00	–	bdu_fstec

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cisa	www.cisa.gov/binding-operational-directive-22-01
cisa	www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/known-exploited-vulnerabilities

11 Feb 2025 12:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18.8

EPSS0.20121

SSVC

Zyxel DSL command injection Windows heap overflow Windows storage vulnerability Known exploited vulnerabilities Binding directive 22-01 Federal agencies Vulnerability catalog