CVE-2022-40282

CVSS 8.8 HIGHEPSS 4.0%CWE-77

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.8EPSS 4.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

25 nov 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection. This allows an authenticated attacker to pass commands to the shell of the system because the dir parameter of the FsCreateDir Ajax function is not sufficiently sanitized. The vendor's ID is BSECV-2022-21.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://packetstormsecurity.com/files/170063/Hirschmann-Belden-BAT-C2-8.8.1.0R8-Command-Injection.html http://seclists.org/fulldisclosure/2022/Nov/19 https://www.belden.com/support/security-assurance