Alerts: CISA Adds Four Known Exploited Vulnerabilities to Catalog

Feb 11, 2025

—

Source URL: https://www.cisa.gov/news-events/alerts/2025/02/11/cisa-adds-four-known-exploited-vulnerabilities-catalog
Source: Alerts
Title: CISA Adds Four Known Exploited Vulnerabilities to Catalog

Feedly Summary: CISA has added four vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2025-21418 Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
CVE-2025-21391 Microsoft Windows Storage Link Following Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.
Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

AI Summary and Description: Yes

Summary: The text is relevant as it discusses recent additions to the CISA’s Known Exploited Vulnerabilities Catalog, highlighting significant vulnerabilities that could impact federal agencies and the broader cybersecurity environment. This information is crucial for professionals focusing on information security, compliance, and risk management.

Detailed Description:
The content outlines the identification and categorization of newly recognized vulnerabilities by the Cybersecurity and Infrastructure Security Agency (CISA), emphasizing the importance of timely remediation of these vulnerabilities to mitigate risks associated with cyberattacks. Here are the main points:

– **Newly Identified Vulnerabilities**:
– CVE-2024-40891: Zyxel DSL CPE OS Command Injection Vulnerability
– CVE-2024-40890: Zyxel DSL CPE OS Command Injection Vulnerability
– CVE-2025-21418: Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
– CVE-2025-21391: Microsoft Windows Storage Link Following Vulnerability

– **Impact of Vulnerabilities**: The identified vulnerabilities are significant attack vectors that malicious cyber actors frequently exploit, posing considerable risks to federal enterprise networks.

– **BOD 22-01**:
– Establishes the Known Exploited Vulnerabilities Catalog to guide remediation actions aimed at reducing significant risks associated with Common Vulnerabilities and Exposures (CVEs).
– Mandates Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities promptly.

– **Broader Implications**: Although BOD 22-01 applies specifically to FCEB agencies, CISA encourages all organizations to prioritize the remediation of vulnerabilities listed in the catalog. This approach aligns with best practices in vulnerability management.

– **Continuous Updates**: CISA will regularly update the catalog with new vulnerabilities that meet specified criteria, underscoring the need for constant vigilance and proactive defense strategies in cybersecurity.

Overall, the information provided by CISA serves as a critical resource for security professionals ensuring compliance with federal cybersecurity directives and mitigating risks associated with exploitable vulnerabilities.

01 1 2 2024 24 3 4 5 a Act actions active defense active exploitation active threats AI alerts and art as attack attack vectors attacks based based buffer overflow Best best practices Binding Operational Directive Buffer Overflow by C catalog CIA CISA command command injection Command Injection Vulnerability Common Vulnerabilities Common Vulnerabilities and Exposures compliance constant content critical CVE cyber cyber actors cyberattack Cyberattacks cybersecurit Cybersecurity Cybersecurity and Infrastructure Security Agency cybersecurity directives cybersecurity environment D de defense defense strategies directive dsl e enterprise environment ERP event exp exploit Exploitation exploited vulnerabilities Exposures fact federal agencies Federal Civilian Executive Branch federal cybersecurity federal enterprise for g Gen Go heap heap-based buffer overflow high Highlight HR http HTTPS implications in information information security infrastructure infrastructure security injection Injection vulnerability ite J k Known Exploited Vulnerabilities Known Exploited Vulnerabilities Catalog l led Link Living low malicious cyber actors man management media Micro Microsoft Microsoft Windows mitigating risks network networks news no o of on operation organization organizations out over point proactive proactive defense proactive defense strategies professionals prompt R rag rate RCE red remediation remediation actions resource Risk risk management risks Ro RoT s sec security security professionals side Sig SoC source SSE storage T text the threat threats Time to Tor TP two UI up update updates US V vectors vigilance vulnerabilities vulnerabilities catalog vulnerability Vulnerability Management vulnerability management practice Wi Wind Windows x