by Kastro
Paper/Archive/CVE-2022-23770

CVE-2022-23770

WISA corp. Smart Wing CMS — WISA Smart Wing CMS Remote Command Execution Vulnerability

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 76.9.769 × 2015.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

This vulnerability could allow a remote attacker to execute remote commands with improper validation of parameters of certain API constructors. Remote attackers could use this vulnerability to execute malicious commands such as directory traversal.

Affected

ProductAffectedFixed inSource
Smart Wing CMSunspecified – < ver.19051ver.19051CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
krcert (CNA)8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refkrcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66963