Zero-day report: December 2024
CISA added 16 exploited vulnerabilities to its catalog in December 2024, 6 fewer than November (22). 6 were zero-days, listed within a week of going public. 4 are known to be used by ransomware. The most-hit vendor was Cleo, with 2.
By technology
Most-hit vendors
Every flaw added in December 2024
- Palo Alto Networks · PAN-OSPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
- Acclaim Systems · USAHERDSAcclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
- BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
- NUUO · NVRmini DevicesNUUO NVRmini Devices OS Command Injection Vulnerability
- Reolink · Multiple IP CamerasReolink Multiple IP Cameras OS Command Injection Vulnerability
- Reolink · RLC-410W IP CameraReolink RLC-410W IP Camera OS Command Injection Vulnerability
- NUUO · NVRmini2 DevicesNUUO NVRmini2 Devices Missing Authentication Vulnerability
- Cleo · Multiple ProductsCleo Multiple Products Unauthenticated File Upload Vulnerability
- Adobe · ColdFusionAdobe ColdFusion Improper Access Control Vulnerability
- Microsoft · WindowsMicrosoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
- Cleo · Multiple ProductsCleo Multiple Products Unrestricted File Upload Vulnerability
- Microsoft · WindowsMicrosoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
- CyberPersons · CyberPanelCyberPanel Incorrect Default Permissions Vulnerability
- North Grid · ProselfNorth Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
- Zyxel · Multiple FirewallsZyxel Multiple Firewalls Path Traversal Vulnerability
- ProjectSend · ProjectSendProjectSend Improper Authentication Vulnerability
Source: CISA's Known Exploited Vulnerabilities catalog, by the date CISA added each flaw. Ransomware use is CISA's flag.