CVE-2022-1373: falha de alta gravidade em Softing Secure Integration Server
Softing Secure Integration Server Relative Path Traversal
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
41Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 7.2epss 13%
da publicação à armano mesmo dia
Publicada no NVD17 de ago.
metasploit27 de jul.
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Softing · Secure Integration ServerCVEs relacionadas — Softing Secure Integration Server
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2334HIGHSofting Secure Integration Server Uncontrolled Search Path ElementEPSS 12.1%CVE-2022-1069HIGHSofting Secure Integration Server Out-of-bounds ReadEPSS 1.6%CVE-2022-2335HIGHSofting Secure Integration Server Integer UnderflowEPSS 1.6%CVE-2022-2337HIGHSofting Secure Integration Server NULL Pointer DereferenceEPSS 1.6%CVE-2022-2547HIGHSofting Secure Integration Server NULL Pointer DereferenceEPSS 1.6%CVE-2023-39481MEDIUMSofting Secure Integration Server Interpretation Conflict Remote Code Execution VulnerabilityEPSS 1.6%