Path Traversal in binwalk
46Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.8epss 22%
from disclosure to weapon12 days
Published on NVDJan 25
1st PoC+12d
exploitation probability
22%top 3% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remote code execution can be achieved by building a PFS filesystem that, upon extraction, would extract a malicious binwalk module into the folder .config/binwalk/plugins.
This vulnerability is associated with program files src/binwalk/plugins/unpfs.py.
This issue affects binwalk from 2.1.2b through 2.3.3 included.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Refirm Labs · binwalkpublic PoCs found — 4
exploitdbwww.exploit-db.com/exploits/51249unverifiedgithubgithub.com/adhikara13/CVE-2022-4510-WalkingPath★ 14githubgithub.com/electr0sm0g/CVE-2022-4510★ 9githubgithub.com/Kalagious/BadPfs-CVE-2022-4510★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.