CVE-2022-40022criticalobserved exploitationCWE-77

CVE-2022-40022

100Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 9.8epss 92%

from disclosure to weapon0 days

Published on NVDFeb 13

metasploitAug 31

VulnCheck+273d

exploitation probability

92%top 1% of all CVEs

observed exploitation

yesVulnCheck

1 public exploit(s)

Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

public PoCs found — 1

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References