deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-37821
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetProvince.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/6; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/6
CVE: CVE-2022-37822
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/3; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/3
CVE: CVE-2022-37823
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetVirtualSer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/1; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/1
CVE: CVE-2022-37824
Published: 2022-08-25
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/5; https://github.com/Darry-lang1/vuln/tree/main/Tenda/AX1803/5
CVE: CVE-2022-37238
Published: 2022-08-25
Description: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://files.mdaemon.com/securitygateway/release/relnotes_en.htm; https://gtn.com.np/wp-content/uploads/2022/07/Authenticated-Reflected-Cross-Site-Scripting-XSS-at-currentRequest-Parameter.pdf; https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
CVE: CVE-2022-37292
Published: 2022-08-25
Description: Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub_42FDE4 function, which satisfies the request of the upper-level interface function sub_430124, that is, handles the post request under /goform/SetIpMacBind.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/The-Itach1/IOT-CVE/tree/master/Tenda/AX12/1; https://github.com/The-Itach1/IOT-CVE/tree/master/Tenda/AX12/1
CVE: CVE-2022-37158
Published: 2022-08-25
Description: RuoYi v3.8.3 has a Weak password vulnerability in the management system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://github.com/YunaiV/ruoyi-vue-pro/issues/170; https://github.com/YunaiV/ruoyi-vue-pro/issues/170
CVE: CVE-2022-37159
Published: 2022-08-25
Description: Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/rce/rce_file_upload.md; https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/rce/rce_file_upload.md
CVE: CVE-2022-37160
Published: 2022-08-25
Description: Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. By combining the XSS vulnerability present in several upload forms and a javascript request to the present API, it is possible to trigger the creation of a user with administrative rights by opening an SVG file as an administrator user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/csrf/csrf.md; https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/csrf/csrf.md
CVE: CVE-2022-37161
Published: 2022-08-25
Description: Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/svg_xss/svg_xss.md; https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/svg_xss/svg_xss.md
CVE: CVE-2022-37162
Published: 2022-08-25
Description: Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary javascript code in the 'Location' field of a calendar event.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/calendar_xss/calendar_xss.md; https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/calendar_xss/calendar_xss.md
CVE: CVE-2018-5483
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2018-5494
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-20192
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-20258
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-20287
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-20301
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-42521
Published: 2022-08-25
Description: There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer dereference may crash the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-476
References: https://discourse.vtk.org/t/vtk-9-2-5-is-out/10549; https://gitlab.kitware.com/vtk/vtk/issues/17818; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCTMSAAVP4BW2HTZLDWMGKZ2WEC5OFLK/
CVE: CVE-2021-42522
Published: 2022-08-25
Description: There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return value of 'xmlGetProp()'.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-401
References: https://gitlab.gnome.org/GNOME/anjuta/-/issues/12; https://gitlab.gnome.org/GNOME/anjuta/-/issues/12
CVE: CVE-2021-42523
Published: 2022-08-25
Description: There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-401
References: https://github.com/hughsie/colord/issues/110; https://github.com/hughsie/colord/issues/110
CVE: CVE-2021-43766
Published: 2022-08-25
Description: Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption. This is similar to CVE-2021-23214 for PostgreSQL.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89, CWE-295
References: https://github.com/yandex/odyssey/issues/376%2C; https://www.postgresql.org/support/security/CVE-2021-23214/; https://github.com/yandex/odyssey/issues/376%2C
CVE: CVE-2021-43767
Published: 2022-08-25
Description: Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'trust' authentication with a 'clientcert' requirement or to use 'cert' authentication, a man-in-the-middle attacker can inject false responses to the client's first few queries. Despite the use of SSL certificate verification and encryption, Odyssey will pass these results to client as if they originated from valid server. This is similar to CVE-2021-23222 for PostgreSQL.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-522, CWE-295
References: https://github.com/yandex/odyssey/issues/377%2C; https://www.postgresql.org/support/security/CVE-2021-23222/; https://github.com/yandex/odyssey/issues/377%2C
CVE: CVE-2021-4022
Published: 2022-08-25
Description: A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin, it causes rizin to crash by freeing an uninitialized (and potentially user controlled, depending on the build) memory address.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-416
References: https://github.com/rizinorg/rizin/issues/2015; https://github.com/rizinorg/rizin/issues/2015
CVE: CVE-2021-4042
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-4141
Published: 2022-08-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-0135
Published: 2022-08-25
Description: An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=2037790; https://lists.debian.org/debian-lts-announce/2022/12/msg00017.html; https://security.gentoo.org/glsa/202210-05
CVE: CVE-2022-23235
Published: 2022-08-25
Description: Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when AutoSupport has been disabled.
CVSS Score: 5.3 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-23715
Published: 2022-08-25
Description: A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in the Logging and Monitoring cluster. The affected APIs are PATCH /api/v1/user and PATCH /deployments/{deployment_id}/elasticsearch/{ref_id}/keystore
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/elastic-cloud-enterprise-3-4-0-security-update/312825; https://www.elastic.co/community/security; https://discuss.elastic.co/t/elastic-cloud-enterprise-3-4-0-security-update/312825
CVE: CVE-2022-2031
Published: 2022-08-25
Description: A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.
CVSS Score: 8.8 (HIGH)
CWE: CWE-288, CWE-287
References: https://security.gentoo.org/glsa/202309-06; https://www.samba.org/samba/security/CVE-2022-2031.html; https://security.gentoo.org/glsa/202309-06
CVE: CVE-2022-2255
Published: 2022-08-25
Description: A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-348, CWE-345
References: https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L13940-L13941; https://github.com/GrahamDumpleton/mod_wsgi/blob/4.9.2/src/server/mod_wsgi.c#L14046-L14082; https://lists.debian.org/debian-lts-announce/2022/09/msg00021.html
CVE: CVE-2022-2463
Published: 2022-08-25
Description: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. A crafted malicious .7z exchange file may allow an attacker to gain the privileges of the ISaGRAF Workbench software when opened. If the software is running at the SYSTEM level, then the attacker will gain admin level privileges. User interaction is required for this exploit to be successful.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03
CVE: CVE-2022-2464
Published: 2022-08-25
Description: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Path Traversal vulnerability. Crafted malicious files can allow an attacker to traverse the file system when opened by ISaGRAF Workbench. If successfully exploited, an attacker could overwrite existing files and create additional files with the same permissions of the ISaGRAF Workbench software. User interaction is required for this exploit to be successful.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03
CVE: CVE-2022-2465
Published: 2022-08-25
Description: Rockwell Automation ISaGRAF Workbench software versions 6.0 through 6.6.9 are affected by a Deserialization of Untrusted Data vulnerability. ISaGRAF Workbench does not limit the objects that can be deserialized. This vulnerability allows attackers to craft a malicious serialized object that, if opened by a local user in ISaGRAF Workbench, may result in remote code execution. This vulnerability requires user interaction to be successfully exploited.
CVSS Score: 8.6 (HIGH)
CWE: CWE-502
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03; https://www.cisa.gov/uscert/ics/advisories/icsa-22-202-03
CVE: CVE-2022-2959
Published: 2022-08-25
Description: A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring(). The specific flaw exists within the handling of pipe buffers. The issue results from the lack of proper locking when performing operations on an object. This flaw allows a local user to crash the system or escalate their privileges on the system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-667, CWE-362, CWE-667
References: https://github.com/torvalds/linux/commit/189b0ddc245139af81198d1a3637cac74f96e13a; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.zerodayinitiative.com/advisories/ZDI-22-1165/
CVE: CVE-2022-2991
Published: 2022-08-25
Description: A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/drivers/lightnvm/Kconfig?h=v5.10.114&id=549209caabc89f2877ad5f62d11fca5c052e0e8; https://www.zerodayinitiative.com/advisories/ZDI-22-960/; https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/drivers/lightnvm/Kconfig?h=v5.10.114&id=549209caabc89f2877ad5f62d11fca5c052e0e8
CVE: CVE-2022-32742
Published: 2022-08-25
Description: A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html; https://security.gentoo.org/glsa/202309-06; https://www.samba.org/samba/security/CVE-2022-32742.html
CVE: CVE-2022-32744
Published: 2022-08-25
Description: A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-290, CWE-290
References: https://security.gentoo.org/glsa/202309-06; https://www.samba.org/samba/security/CVE-2022-32744.html; https://security.gentoo.org/glsa/202309-06
CVE: CVE-2022-32745
Published: 2022-08-25
Description: A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125, CWE-908
References: https://security.gentoo.org/glsa/202309-06; https://www.samba.org/samba/security/CVE-2022-32745.html; https://security.gentoo.org/glsa/202309-06
CVE: CVE-2022-32746
Published: 2022-08-25
Description: A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://security.gentoo.org/glsa/202309-06; https://www.samba.org/samba/security/CVE-2022-32746.html; https://security.gentoo.org/glsa/202309-06
CVE: CVE-2022-36358
Published: 2022-08-25
Description: Cross-Site Request Forgery (CSRF) vulnerability in SEO Scout plugin <= 0.9.83 at WordPress allows attackers to trick users with administrative rights to unintentionally change the plugin settings.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/ab-rankings-testing-tool/wordpress-seo-scout-plugin-0-9-83-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/ab-rankings-testing-tool/; https://patchstack.com/database/vulnerability/ab-rankings-testing-tool/wordpress-seo-scout-plugin-0-9-83-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2022-37952
Published: 2022-08-25
Description: A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.ge.com/content/dam/cyber_security/global/en_US/pdfs/2022-08-23_WorkstationST_Reflected_XSS.pdf; https://www.ge.com/content/dam/cyber_security/global/en_US/pdfs/2022-08-23_WorkstationST_Reflected_XSS.pdf
CVE: CVE-2022-37953
Published: 2022-08-25
Description: An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-113
References: https://www.ge.com/content/dam/cyber_security/global/en_US/pdfs/2022-08-23_WorkstationST_Response_Splitting.pdf; https://www.ge.com/content/dam/cyber_security/global/en_US/pdfs/2022-08-23_WorkstationST_Response_Splitting.pdf
CVE: CVE-2022-20823
Published: 2022-08-25
Description: A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.
CVSS Score: 8.6 (HIGH)
CWE: CWE-126, CWE-125
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu
CVE: CVE-2022-20824
Published: 2022-08-25
Description: A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation of specific values that are within a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges or cause the Cisco Discovery Protocol process to crash and restart multiple times, which would cause the affected device to reload, resulting in a DoS condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cdp-dos-ce-wWvPucC9; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-20865
Published: 2022-08-25
Description: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-cmdinj-TxcLNZNH; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-cmdinj-TxcLNZNH