CVE-2022-1410

Remote Code Execution in Device42 ApplianceManager console

CVSS 8 HIGHEPSS 1.0%CWE-78

OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This issue affects: Device42 CMDB version 18.01.00 and prior versions.

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Produtos afetados

Device42 · CMDB

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.bitdefender.com/blog/labs/a-red-team-perspective-on-the-device42-asset-management-appliance/