CVE-2022-40741

SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Command Injection

CVSS 9.8 CRITICALEPSS 1.1%CWE-78

Vexday Risk Score

28Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 9.8EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

31 out 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

SOFTNEXT TECHNOLOGIES CORP. · Mail SQR Expert

Referências

https://www.twcert.org.tw/tw/cp-132-6643-89bfa-1.html