--- title: "Security digest: March 3, 2025" url: https://erroneo.us/security/2025-03-03/ description: "March 3, 2025 vulnerability digest: 5 CISA KEV additions (Cisco, Hitachi Vantara, Microsoft…). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2025-03-03 date_modified: 2025-03-03 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: March 3, 2025 5 known exploited (cisa kev) additions. ## Take stock - Do you run any of these? Progress WhatsUp Gold, Cisco Small Business RV Series Routers, Hitachi Vantara Pentaho Business Analytics (BA) Server, Microsoft Windows. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-03-24. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2024-4885](https://erroneo.us/security/cve/CVE-2024-4885/index.md) Progress WhatsUp Gold: Progress WhatsUp Gold Path Traversal Vulnerability (CISA due 2025-03-24) - [CVE-2023-20118](https://erroneo.us/security/cve/CVE-2023-20118/index.md) Cisco Small Business RV Series Routers: Cisco Small Business RV Series Routers Command Injection Vulnerability (CISA due 2025-03-24) - [CVE-2022-43939](https://erroneo.us/security/cve/CVE-2022-43939/index.md) Hitachi Vantara Pentaho Business Analytics (BA) Server: Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability (CISA due 2025-03-24) - [CVE-2022-43769](https://erroneo.us/security/cve/CVE-2022-43769/index.md) Hitachi Vantara Pentaho Business Analytics (BA) Server: Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability (CISA due 2025-03-24) - [CVE-2018-8639](https://erroneo.us/security/cve/CVE-2018-8639/index.md) Microsoft Windows: Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability (CISA due 2025-03-24) ## Critical advisories None. --- Source page: https://erroneo.us/security/2025-03-03/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt