CVE-2022-23334

CRITICAL 9.8CVE-2022-23334 · Published 30/01/2023 · updated 09/07/2026

In short

CVE-2022-23334 is a CRITICAL (CVSS 9.8) vulnerability affecting newtest (ip-label).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.5% of all vulnerabilities.
Fix: update to 8.5r0 or later.

Package	Affected versions	Patched versions
newtest ip-label	`< 8.5r0`	`8.5r0`

Description

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.

References

on-x.com/wp-content/uploads/2023/01/ON-X-Security-Advisory-Ip-label-Ekara-Newtest-CVE-2022-23334.pdf · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free