NVD disclosure day

Published threat advisories for February 18, 2022

CVE advisoryCRITICAL

CVE-2022-0664

Netmaker has hard-coded passwords that attackers can use to steal customer data and take control.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical flaw in Netmaker exposes your network infrastructure to unauthorized access, allowing attackers to steal data or take full control of your systems. This issue is urgent because the vulnerability is easily exploitable over the internet.

CVE advisoryCRITICAL

CVE-2022-25315

Expat Integer Overflow Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

An integer overflow vulnerability exists in the Expat XML parsing library. If reachable, this could allow an attacker to cause memory corruption, potentially leading to denial-of-service or arbitrary code execution when processing malicious XML input. It is important to identify if this library is in use within the env