Update KEV: Tue Jun 3 00:13:10 UTC 2025

Signed-off-by: AboutCode Automation <[email protected]>

Author: aboutcode-automation

known_exploited_vulnerabilities.json

@@ -1,9 +1,84 @@
 {
     "title": "CISA Catalog of Known Exploited Vulnerabilities",
-    "catalogVersion": "2025.05.30",
-    "dateReleased": "2025-05-30T21:01:55.3914Z",
-    "count": 1352,
+    "catalogVersion": "2025.06.02",
+    "dateReleased": "2025-06-02T17:47:59.1391Z",
+    "count": 1357,
     "vulnerabilities": [
+        {
+            "cveID": "CVE-2021-32030",
+            "vendorProject": "ASUS",
+            "product": "Routers",
+            "vulnerabilityName": "ASUS Routers Improper Authentication Vulnerability",
+            "dateAdded": "2025-06-02",
+            "shortDescription": "ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and\/or end-of-service (EoS). Users should discontinue product utilization.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-06-23",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/www.asus.com\/us\/supportonly\/lyra%20mini\/helpdesk_bios\/ ; https:\/\/www.asus.com\/us\/supportonly\/rog%20rapture%20gt-ac2900\/helpdesk_bios\/; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-32030",
+            "cwes": [
+                "CWE-287"
+            ]
+        },
+        {
+            "cveID": "CVE-2025-3935",
+            "vendorProject": "ConnectWise",
+            "product": "ScreenConnect",
+            "vulnerabilityName": "ConnectWise ScreenConnect Improper Authentication Vulnerability",
+            "dateAdded": "2025-06-02",
+            "shortDescription": "ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-06-23",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/www.connectwise.com\/company\/trust\/security-bulletins\/screenconnect-security-patch-2025.4 ;   https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-3935",
+            "cwes": [
+                "CWE-287"
+            ]
+        },
+        {
+            "cveID": "CVE-2025-35939",
+            "vendorProject": "Craft CMS",
+            "product": "Craft CMS",
+            "vulnerabilityName": "Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability",
+            "dateAdded": "2025-06-02",
+            "shortDescription": "Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated client to introduce arbitrary values, such as PHP code, to a known local file location on the server. This vulnerability could be chained with CVE-2024-58136 as represented by CVE-2025-32432.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-06-23",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/github.com\/craftcms\/cms\/pull\/17220 ;   https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-35939",
+            "cwes": [
+                "CWE-472"
+            ]
+        },
+        {
+            "cveID": "CVE-2024-56145",
+            "vendorProject": "Craft CMS",
+            "product": "Craft CMS",
+            "vulnerabilityName": "Craft CMS Code Injection Vulnerability",
+            "dateAdded": "2025-06-02",
+            "shortDescription": "Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-06-23",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/github.com\/craftcms\/cms\/security\/advisories\/GHSA-2p6p-9rc9-62j9 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-56145",
+            "cwes": [
+                "CWE-94"
+            ]
+        },
+        {
+            "cveID": "CVE-2023-39780",
+            "vendorProject": "ASUS",
+            "product": "RT-AX55 Routers",
+            "vulnerabilityName": "ASUS RT-AX55 Routers OS Command Injection Vulnerability",
+            "dateAdded": "2025-06-02",
+            "shortDescription": "ASUS RT-AX55 devices contain a OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-06-23",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/www.asus.com\/networking-iot-servers\/wifi-6\/all-series\/rt-ax55\/helpdesk_bios\/?model2Name=RT-AX55 ;   https:\/\/www.asus.com\/content\/asus-product-security-advisory\/ ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-39780",
+            "cwes": [
+                "CWE-78"
+            ]
+        },
         {
             "cveID": "CVE-2025-4632",
             "vendorProject": "Samsung",