Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-0551

Опубликовано: 24 мар. 2022
Источник: nvd
CVSS3: 7.2
CVSS2: 6.5
EPSS Низкий

Описание

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:*
Версия до 22.0.0 (исключая)
cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*
Версия до 22.0.0 (исключая)

EPSS

Процентиль: 64%
0.00477
Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

CVSS3: 7.2
github
почти 4 года назад

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.

EPSS

Процентиль: 64%
0.00477
Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-20
CWE-20