Digest · Monday
Security digest: March 3, 2025
5 known exploited (cisa kev) additions.
All digests · RSS · Markdown
Take stock
- Do you run any of these? Progress WhatsUp Gold, Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho Business Analytics (BA) Server, Microsoft Windows. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-03-24.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 5
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
| CVE | Product and flaw | CISA due |
|---|---|---|
| CVE-2024-4885 | Progress WhatsUp Gold Progress WhatsUp Gold Path Traversal Vulnerability | 2025-03-24 |
| CVE-2023-20118 | Cisco Small Business RV Series Routers Cisco Small Business RV Series Routers Command Injection Vulnerability | 2025-03-24 |
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | 2025-03-24 |
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | 2025-03-24 |
| CVE-2018-8639 | Microsoft Windows Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability Ransomware | 2025-03-24 |
Critical advisories by ecosystem 0
GitHub-reviewed advisories rated critical, published this day (Pacific time).
None.