Home / 2017 Advisories Archive

2017 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Source	Industry Reference	Description
Critical	21 May 2017	2 Nov 2021	CPAI-2017-0428			PDF File Containing Ransomware Downloader
High	8 May 2017	31 Oct 2021	CPAI-2017-0347	SAP	CVE-2017-6950	SAP GUI regsvr32.exe Rule Security Policy Bypass (CVE-2017-6950)
Critical	7 Dec 2017	31 Oct 2021	CPAI-2017-1059			Cobalt Strike Payload Remote Code Execution
Critical	28 Nov 2017	31 Oct 2021	CPAI-2017-1209	Microsoft CVE-2017-8717	CVE-2017-8717	Microsoft JET Database Engine Excel Component Buffer Overflow (CVE-2017-8717)
Critical	25 May 2017	23 Aug 2021	CPAI-2017-0444		CVE-2017-7494	Linux EternalRed Samba Remote Code Execution (CVE-2017-7494)
Critical	11 Jul 2017	24 Jun 2021	CPAI-2017-0542	Microsoft CVE-2017-8619	CVE-2017-8619	Microsoft Edge Remote Code Execution (CVE-2017-8619)
Critical	13 Jun 2017	7 Apr 2021	CPAI-2017-0504			Microsoft Office Malicious Macros
Critical	24 Sep 2017	26 Jan 2021	CPAI-2017-0783			Multiple Websites Mine Cryptocurrencies CPU Hijacking
High	25 Sep 2017	21 Jun 2020	CPAI-2017-0789	Linux Kernel Project	CVE-2017-8797	Linux Kernel NFSv4 nfsd PNFS denial of Service (CVE-2017-8797)
Critical	23 May 2017	10 Jun 2020	CPAI-2017-0437	Rapid7	CVE-2016-6277	Netgear R7000 and R6400 cgi-bin Command Injection (CVE-2016-6277)
Critical	14 Aug 2017	10 Jun 2020	CPAI-2017-0688	Metasploit		McAfee SaaS Remote Command Execution
Critical	19 Oct 2017	10 Jun 2020	CPAI-2017-0854			Netgear DGN Unauthenticated Command Execution
Critical	19 Oct 2017	10 Jun 2020	CPAI-2017-0853			Netgear ReadyNAS Remote Command Execution
Critical	26 Jul 2017	10 Jun 2020	CPAI-2017-0590	Metasploit	CVE-2017-6334	Netgear DGN2200 dnslookup.cgi Command Injection (CVE-2017-6334)
High	14 Nov 2017	8 May 2020	CPAI-2017-0910	Microsoft CVE-2017-11855	CVE-2017-11855	Microsoft Internet Explorer Memory Corruption (CVE-2017-11855)
Medium	24 Sep 2017	24 Oct 2019	CPAI-2017-0784		CVE-2017-10953 CVE-2019-8160	Foxit Reader and PhantonPDF XFA gotoURL Command Injection (CVE-2017-10953; CVE-2019-8160)
High	24 Oct 2017	25 Sep 2019	CPAI-2017-0870	Microsoft	CVE-2017-11764	Microsoft Edge Chakra ParseCatch Type Confusion (CVE-2017-11764)
Critical	6 Nov 2017	25 Sep 2019	CPAI-2017-0876			Hikvision IP Cameras Authentication Bypass (CVE-2017-7921)
Critical	10 Aug 2017	4 Sep 2019	CPAI-2017-0679	HPE	CVE-2017-5804 CVE-2017-5805	HPE Intelligent Management Center Imcwlandm Stack Buffer Overflow (CVE-2017-5804; CVE-2017-5805)
Critical	26 Apr 2017	25 Aug 2019	CPAI-2017-0332			Microsoft Windows EternalBlue SMB Remote Code Execution
High	17 Dec 2017	8 Aug 2019	CPAI-2017-1070		CVE-2012-5081 CVE-2016-6883 CVE-2017-1000385 CVE-2017-12373 CVE-2017-13098 CVE-2017-13099 CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-17841 CVE-2017-6168	ROBOT TLS_RSA Scanning Attempt (CVE-2012-5081; CVE-2016-6883; CVE-2017-1000385; CVE-2017-12373; CVE-2017-13098; CVE-2017-13099; CVE-2017-17382; CVE-2017-17427; CVE-2017-17428; CVE-2017-17841; CVE-2017-6168)
Critical	7 Mar 2017	22 Jul 2019	CPAI-2017-0197		CVE-2017-5638	Apache Struts2 Content-Type Remote Code Execution (CVE-2017-5638)
Critical	18 Sep 2017	13 Jun 2019	CPAI-2017-0767			Malicious Embedded Executable Downloader
Critical	8 Aug 2017	6 Jun 2019	CPAI-2017-0606	Adobe APSB17-24	CVE-2017-3124	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-3124)
Medium	7 Jun 2017	21 May 2019	CPAI-2017-0479	IBM	CVE-2017-1274	IBM Domino IMAP Mailbox Name Stack Buffer Overflow (CVE-2017-1274)
Critical	1 Jun 2017	19 May 2019	CPAI-2017-0445			RIG Exploit Kit Landing Page URL
Critical	7 Mar 2017	12 May 2019	CPAI-2015-1415			Metasploit Meterpreter Reverse Payloads Remote Code Execution - ver2
High	10 Jan 2017	27 Mar 2019	CPAI-2017-0010	Microsoft MS17-004	CVE-2017-0004	Microsoft LSASS Denial of Service (MS17-004: CVE-2017-0004)
Critical	24 Sep 2017	25 Feb 2019	CPAI-2017-0779		CVE-2017-12615 CVE-2017-12617	Apache Tomcat PUT Method Arbitrary File Upload Remote Code Execution (CVE-2017-12615; CVE-2017-12617)
Critical	28 Jun 2017	11 Feb 2019	CPAI-2017-0530			Petya Ransomware Lateral Movement Remote Code Execution
High	22 Jan 2017	4 Feb 2019	CPAI-2017-0060	LibVNC Development Team	CVE-2016-9941	LibVNCServer LibVNCClient FramebufferUpdate Rectangle Heap Buffer Overflow (CVE-2016-9941)
Low	20 Nov 2017	23 Jan 2019	CPAI-2017-1008		CVE-2017-16548	Rsync receive_xattr Heap-based Buffer Overread (CVE-2017-16548)
Critical	15 Mar 2017	13 Jan 2019	CPAI-2017-0226		CVE-2013-4980 CVE-2013-4981 CVE-2013-4982	AVTECH Devices Multiple Vulnerabilities (CVE-2013-4980; CVE-2013-4981; CVE-2013-4982)
Critical	26 Jan 2017	23 Dec 2018	CPAI-2017-0067		CVE-2017-3823	Cisco WebEx Meetings Server and Center Remote Code Execution (CVE-2017-3823)
Critical	9 May 2017	5 Dec 2018	CPAI-2017-0399		CVE-2017-5689	Intel AMT Framework Unauthorized Admin Entry (CVE-2017-5689)
Critical	21 Nov 2017	29 Oct 2018	CPAI-2017-1009	Microsoft CVE-2017-11882	CVE-2017-11882	Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
Critical	13 Jun 2017	25 Oct 2018	CPAI-2017-0477	Microsoft CVE-2017-8464	CVE-2017-8464 CVE-2018-0978	Microsoft LNK Remote Code Execution (CVE-2017-8464; CVE-2018-0978)
Critical	7 Jun 2017	22 Oct 2018	CPAI-2017-0473			PowerShell Script Encoding Evasion
Medium	13 Feb 2017	16 Oct 2018	CPAI-2017-0120	Rapid7	CVE-2007-3314	Altap Salamander 2.5 PE Viewer Buffer Overflow (CVE-2007-3314)
High	8 Oct 2017	16 Oct 2018	CPAI-2017-0828	Digium	CVE-2017-14100	Digium Asterisk app_minivm Caller-ID Command Execution (CVE-2017-14100)
Critical	31 Oct 2017	10 Oct 2018	CPAI-2017-0889			Suspicious Metadata Mail Phishing Containing Attachment - ver2
High	13 Jul 2017	3 Sep 2018	CPAI-2017-0566			Malicious JavaScript Trojan Downloader
Medium	8 Aug 2017	28 Aug 2018	CPAI-2017-0607	Adobe APSB17-24	CVE-2017-11209	Adobe Acrobat and Reader Memory Corruption (APSB17-24: CVE-2017-11209)
Medium	8 Aug 2017	27 Aug 2018	CPAI-2017-0674	Cisco cisco-sa-20170517-pcp2	CVE-2017-6621	Cisco Prime Collaboration Provisioning logconfigtracer.jsp Directory Traversal (CVE-2017-6621)
Critical	20 Jul 2017	26 Aug 2018	CPAI-2017-0576	Cisco	CVE-2017-6622	Cisco Prime Collaboration Provisioning ScriptMgr Authentication Bypass (CVE-2017-6622)
Critical	7 Feb 2017	5 Aug 2018	CPAI-2016-1123			Suspicious Proxy Auto-Config File
Medium	7 Jun 2017	24 Jul 2018	CPAI-2017-0480	Digium		Digium Asterisk SIP CSeq Heap Buffer Overflow
Critical	29 Aug 2017	22 Jul 2018	CPAI-2017-0725	Microsoft	CVE-2017-8570	Microsoft Office Composite Moniker Code Execution (CVE-2017-8570)
High	12 Dec 2017	10 Jul 2018	CPAI-2017-1032	Microsoft CVE-2017-11888	CVE-2017-11888 CVE-2018-8125	Microsoft Edge Memory Corruption (CVE-2017-11888; CVE-2018-8125)
Medium	20 Jun 2017	8 Jul 2018	CPAI-2017-0519	Mozilla	CVE-2017-5459	Mozilla Firefox WebGL Integer Overflow (CVE-2017-5459)