CVE-2022-22947criticalbajo ataqueCWE-94

CVE-2022-22947: fallo crítico en Spring Cloud Gateway

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cloud Gateway+ Monitorear Spring Cloud Gateway

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 10epss 98%
de la publicación al armael mismo día
Publicada en NVD3 mar
1ª PoC25 ene
metasploit26 ene
CISA KEV+74d
Acción exigida por CISAplazo federal: 2022-06-06

Apply updates per vendor instructions.

En resumen

Spring Cloud Gateway permite que atacantes ejecuten código arbitrario en el servidor si el endpoint Actuator está expuesto sin protección adecuada. Una solicitud especialmente elaborada puede permitir la ejecución remota de comandos.

Detalle técnico

Vulnerabilidad de inyección de código (CWE-94) en el endpoint Actuator de Spring Cloud Gateway permite ejecución remota de código cuando el endpoint está expuesto sin autenticación. Precondición: Actuator debe estar habilitado y accesible públicamente. El vector de ataque implica enviar payloads maliciosos a través de la interfaz Actuator, resultando en ejecución arbitraria de comandos en el host.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
n/a · Spring Cloud Gateway
PoCs públicas encontradas — 97
exploitdbwww.exploit-db.com/exploits/50799no verificadogithubgithub.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947★ 221githubgithub.com/whwlsfb/cve-2022-22947-godzilla-memshell★ 210githubgithub.com/SecNN/CVE-2022-22947_Rce_Exp★ 77githubgithub.com/tangxiaofeng7/CVE-2022-22947-Spring-Cloud-Gateway★ 72githubgithub.com/0730Nophone/CVE-2022-22947-★ 59githubgithub.com/crowsec-edtech/CVE-2022-22947★ 37githubgithub.com/0x7eTeam/CVE-2022-22947★ 34githubgithub.com/Tas9er/SpringCloudGatewayRCE★ 27githubgithub.com/Zh0um1/CVE-2022-22947★ 27githubgithub.com/Enokiy/cve-2022-22947-spring-cloud-gateway★ 18githubgithub.com/viemsr/spring_cloud_gateway_memshell★ 18githubgithub.com/B0rn2d/Spring-Cloud-Gateway-Nacos★ 16githubgithub.com/MoCh3n/CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE★ 14githubgithub.com/4nNns/CVE-2022-22947★ 12githubgithub.com/k3rwin/spring-cloud-gateway-rce★ 12githubgithub.com/Vulnmachines/spring-cve-2022-22947★ 11githubgithub.com/twseptian/cve-2022-22947★ 11githubgithub.com/Wrin9/CVE-2022-22947★ 11githubgithub.com/SiJiDo/CVE-2022-22947★ 9githubgithub.com/dingxiao77/-cve-2022-22947-★ 9githubgithub.com/mrknow001/CVE-2022-22947★ 7githubgithub.com/anansec/CVE-2022-22947_EXP★ 7githubgithub.com/hunzi0/CVE-2022-22947-Rce_POC★ 7githubgithub.com/YutuSec/SpEL★ 6githubgithub.com/darkb1rd/cve-2022-22947★ 6githubgithub.com/Arrnitage/CVE-2022-22947_exp★ 5githubgithub.com/Greetdawn/CVE-2022-22947★ 5githubgithub.com/sagaryadav8742/springcloudRCE★ 4githubgithub.com/stayfoolish777/CVE-2022-22947-POC★ 3githubgithub.com/LY613313/CVE-2022-22947★ 3githubgithub.com/nu0l/cve-2022-22947★ 3githubgithub.com/dbgee/CVE-2022-22947★ 2githubgithub.com/Le1a/CVE-2022-22947★ 2githubgithub.com/22ke/CVE-2022-22947★ 2githubgithub.com/kkx600/Burp_VulPscan★ 2githubgithub.com/Vancomycin-g/CVE-2022-22947★ 2githubgithub.com/talentsec/Spring-Cloud-Gateway-CVE-2022-22947★ 1githubgithub.com/Wrong-pixel/CVE-2022-22947-exp★ 1githubgithub.com/bysinks/CVE-2022-22947★ 1githubgithub.com/Nathaniel1025/CVE-2022-22947★ 1githubgithub.com/Jun-5heng/CVE-2022-22947★ 1githubgithub.com/qq87234770/CVE-2022-22947★ 1githubgithub.com/kmahyyg/CVE-2022-22947★ 1githubgithub.com/skysliently/CVE-2022-22947-pb-ai★ 0githubgithub.com/Sumitpathania03/CVE-2022-22947★ 0githubgithub.com/scopion/cve-2022-22947★ 0githubgithub.com/SanderSchepers1993/CyberSec2026★ 0githubgithub.com/CyberCTF/vulhub-spring-cve-2022-22947★ 0githubgithub.com/flying0er/CVE-2022-22947-goby★ 0githubgithub.com/nanaao/CVE-2022-22947-POC★ 0githubgithub.com/scopion/CVE-2022-22947-exp★ 0githubgithub.com/superneilcn/SpringExploitGUI★ 0githubgithub.com/cc3305/CVE-2022-22947★ 0githubgithub.com/shoucheng3/spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6★ 0githubgithub.com/ciri3/spring-cloud-gateway-cve-2022-22947-report★ 0githubgithub.com/entr0pie/demo-cve-2022-22947★ 0githubgithub.com/BerMalBerIst/CVE-2022-22947★ 0githubgithub.com/PaoPaoLong-lab/Spring-CVE-2022-22947-★ 0githubgithub.com/hh-hunter/cve-2022-22947-docker★ 0githubgithub.com/fbion/CVE-2022-22947★ 0githubgithub.com/aesm1p/CVE-2022-22947-POC-Reproduce★ 0githubgithub.com/Summer177/Spring-Cloud-Gateway-CVE-2022-22947★ 0vulncheckvulncheck.com/xdb/e911b1c2597fno verificadovulncheckvulncheck.com/xdb/06a474d9b7ecno verificadovulncheckvulncheck.com/xdb/e7ca8c762802no verificadovulncheckvulncheck.com/xdb/afa67d1ce366no verificadovulncheckvulncheck.com/xdb/bd2a06bbd8bbno verificadovulncheckvulncheck.com/xdb/1c0791ff43d4no verificadovulncheckvulncheck.com/xdb/48f7a107c7f1no verificadovulncheckvulncheck.com/xdb/befe5bc2b98fno verificadovulncheckvulncheck.com/xdb/e709c7824d6fno verificadovulncheckvulncheck.com/xdb/a48d3f6ecc63no verificadovulncheckvulncheck.com/xdb/d03fdfb98036no verificadovulncheckvulncheck.com/xdb/6eeb91b260d2no verificadovulncheckvulncheck.com/xdb/a02abe0b70a0no verificadovulncheckvulncheck.com/xdb/ee5d2b5c3f92no verificadovulncheckvulncheck.com/xdb/32e3404666d2no verificadovulncheckvulncheck.com/xdb/66245b597db0no verificadovulncheckvulncheck.com/xdb/7bc2856e5f63no verificadocve_referencepacketstormsecurity.com/files/166219/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/ef9e824eaf8fno verificadovulncheckvulncheck.com/xdb/0751146bcae7no verificadovulncheckvulncheck.com/xdb/fd72b929a3aeno verificadovulncheckvulncheck.com/xdb/fee11cd0237cno verificadovulncheckvulncheck.com/xdb/b1f298b6352ano verificadovulncheckvulncheck.com/xdb/769ad48809b9no verificadovulncheckvulncheck.com/xdb/3290d808ee36no verificadovulncheckvulncheck.com/xdb/81a8282f1ea5no verificadovulncheckvulncheck.com/xdb/3faa58c1474cno verificadocve_referencepacketstormsecurity.com/files/168742/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/0e346534d99cno verificadovulncheckvulncheck.com/xdb/ef11176b296dno verificadovulncheckvulncheck.com/xdb/3e6c0320c020no verificadovulncheckvulncheck.com/xdb/2665970cc7d0no verificadovulncheckvulncheck.com/xdb/497a7868a7f8no verificadovulncheckvulncheck.com/xdb/9344fae60775no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.