Top 10 Vulnerabilities That Were Exploited the Most In 2023

Quite a lot of vulnerabilities had been recognized and exploited by likelihood actors within the wild this year for a lot of malicious capabilities, comparable to Ransomware, cyber espionage, recordsdata theft, cyberterrorism, and plenty nation-say-sponsored actions.

Some vulnerabilities were added to the CISA’s Identified Exploited Vulnerabilities catalog, marking them as extraordinarily famous to patch. Merchandise belonging to a lot of vendors, comparable to Microsoft, Citrix, Fortinet, Progress, and plenty others, were affected as a end result of these vulnerabilities.

One of the famous crucial tip vulnerabilities that were exploited this year are,

1. MOVEit Vulnerability (CVE-2023-34362)
2. Microsoft Outlook Privilege Escalation (CVE-2023-23397)
3. Fortinet FortiOS (CVE-2022-41328)
4. ChatGPT (CVE-2023-28858)
5. Dwelling windows Overall Log File Gadget Driver Privilege Escalation (CVE-2023-28252)
6. Barracuda Electronic mail Security Gateway Vulnerability (CVE-2023-2868)
7. Adobe ColdFusion (CVE-2023-26360)
8. Citrix Bleed Vulnerability (CVE 2023-4966)
9. Dwelling windows Neat Screen Bypass (CVE-2023-24880)
10. SugarCRM Far-off Code Execution (CVE-2023-22952)

Progress MOVEit SQL Injection vulnerability

This vulnerability existed in Progress MOVEit Switch versions outdated to 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1) which were at likelihood of SQL injection assault.

An unauthenticated likelihood actor would possibly maybe exploit this vulnerability and carry out access to MOVEit Switch’s Database and produce malicious actions love altering or deleting the database parts.

This vulnerability used to be exploited within the wild in Would possibly maybe and June 2023 by the CL0P ransomware team of workers. The Severity for this vulnerability used to be given as 9.8 (Serious). Progress released patched versions for fixing this vulnerability alongside precautionary steps.

Microsoft Outlook Elevation of Privilege Vulnerability

This vulnerability existed in all versions of Outlook Prospects, in conjunction with Outlook for Android, iOS, Mac, and Dwelling windows customers. A likelihood actor can exploit this vulnerability by sending a namely crafted mail, automatically triggering this exploitation.

Furthermore, right here’s a 0-click on vulnerability, as no user interaction is required to use this vulnerability. A success exploitation of this vulnerability leaks the victim’s Win-NTLMv2 hashes, which can then be used to provide relay assaults on various systems and also authenticate the likelihood actor as the centered user.

A Russia-essentially based likelihood actor exploited this vulnerability to center of attention on authorities, transportation, energy, and defense power sectors in Europe. The severity for this vulnerability has been given as 9.8 (Serious).

Microsoft has released a patched model to take care of this vulnerability.

Direction Traversal Vulnerability in Fortinet FortiOS

This vulnerability existed in a pair of FortiOS versions, allowing a privileged likelihood actor to read and write arbitrary recordsdata thru crafted CLI commands as a end result of depraved pathname validation to a restricted directory.

This vulnerability used to be came all the contrivance in which thru to be exploited by a Chinese cyberespionage team of workers in opposition to governments. The severity of this vulnerability used to be given as 7.1 (Excessive). Fortinet has released patched versions to repair this vulnerability.

CVE-2023-28858: Off-by-one Error in ChatGPT

This vulnerability existed within the redis-py of the ChatGPT model outdated to 4.5.3, which permits a user to search out any person else’s chat history if each customers were filled with life concurrently. Furthermore, OpenAI acknowledged that there can also unprejudiced had been an “unintentional visibility of price-connected knowledge of 1.2% of the ChatGPT Plus subscribers who were filled with life in some unspecified time in the future of the existence of this trojan horse.”

OpenAI has patched this vulnerability impulsively upon being notified. The severity of this vulnerability used to be given as 3.7 (Low).

Dwelling windows Overall Log File Gadget Driver Privilege Escalation

This vulnerability permits a likelihood actor with access to the systems to bustle code with SYSTEM privileges. This exists within the clfs.sys driver which is defaultly set apart in on Dwelling windows 10 21H2, Dwelling windows 11 21H2 and Dwelling windows Server 20348 OSes.

The Nokoyawa ransomware team of workers exploited this vulnerability to assault organizations in April 2023. The severity for this vulnerability used to be given as 7.8 (Excessive). Microsoft has released patches to repair this vulnerability.

RCE in Barracuda Electronic mail Security Gateway

This vulnerability existed in Barracuda Electronic mail Security Gateway versions 5.1.3.001-9.2.0.006 as a end result of depraved sanitization in processing the .tar recordsdata. A likelihood actor would possibly maybe exploit this vulnerability and cancel system commands with the product privileges.

This vulnerability used to be actively exploited by UNC4841, which works beneath the strengthen of the Folks’s Republic of China for espionage and various actions. The severity for this vulnerability used to be given as 9.8 (Serious).

Barracuda Networks has released patches for this vulnerability.

Arbitrary code execution in Adobe ColdFusion

This vulnerability affects Adobe ColdFusion model 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier), allowing likelihood actors to cancel arbitrary code beneath the user’s context as a end result of depraved access alter.

An unknown likelihood actor exploited this vulnerability in June and July 2023. The severity of this vulnerability used to be given as 9.8 (Serious). Adobe has released patches to repair this vulnerability.

Citrix Bleed Vulnerability

This vulnerability existed in a pair of versions of Citrix NetScaler ADC and Gateway house equipment, allowing likelihood actors to retrieve sensitive knowledge on affected devices. The LockBit 3.0 Ransomware team of workers actively exploited this vulnerability in November 2023.

The severity of this vulnerability used to be given as 7.5 (Excessive). A publicly readily available exploit code exists for this vulnerability and a lot of different cases of exploitation were came all the contrivance in which thru. Citrix has released patches to repair this vulnerability.

CVE-2023-24880: Dwelling windows SmartScreen Security Characteristic Bypass Vulnerability

Threat actors can exploit this vulnerability by handing over malicious MSI recordsdata that bypass the Brand-of-the-Web (MOTW) warning, doubtlessly deploying malware onto the system. This vulnerability used to be exploited by Magniber ransomware and Qakbot malware likelihood actors.

The severity of this vulnerability used to be given 4.4 (Medium). Furthermore, this vulnerability bypassed a previously recognized vulnerability on the Dwelling windows SmartScreen. Microsoft has released patches to repair this vulnerability.

CVE-2023-22952: Far-off Code Execution Vulnerability in SugarCRM

This vulnerability exists within the Electronic mail templates of SugarCRM, which can also unprejudiced be exploited by a likelihood actor with any user privilege utilizing a namely crafted quiz. The likelihood actor can also also inject a customized PHP code as a end result of missing input validation.

The severity for this vulnerability used to be given as 8.8 (Excessive). Many SugarCRM 11.0 and 12.0 merchandise were plagued by this vulnerability. On the opposite hand, SugarCRM has released patches to repair this vulnerability.

There had been a lot of serious vulnerabilities came all the contrivance in which thru this year, with the exception of the above checklist. Customers of these merchandise are urged to upgrade to essentially the most contemporary versions to quit these vulnerabilities from getting exploited by likelihood actors.