by Kastro
Paper/Archive/CVE-2022-42711

CVE-2022-42711

mitre — In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input.

EPSS 1%CVSS 9.6
critical.is priorityof 100
43
CVSS 9.6 (NVD, ADP agree)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 72.3.723 × 2014.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refprogress.comrefprogress.com/network-monitoringrefcommunity.progress.com/s/article/Product-Alert-Bulletin-October-2022