CVE-2022-1410

ALTO 8.8CVE-2022-1410 · Published 17/08/2022 · updated 17/06/2026

In breve

CVE-2022-1410 è una vulnerabilità ALTO (CVSS 8.8) che riguarda cmdb (device42).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 64.6% delle vulnerabilità.
Correzione: aggiornare a 18.01.00 o successiva.

Package	Affected versions	Patched versions
cmdb device42	`< 18.01.00`	`18.01.00`

Description

OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This issue affects: Device42 CMDB version 18.01.00 and prior versions.

References

bitdefender.com/blog/labs/a-red-team-perspective-on-the-device42-asset-management-appliance · Third Party Advisory

Altre vulnerabilità di cmdb

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free