CVE-2022-1521

概要

参考情報

• cisa.gov/uscert/ics/advisories/icsa-22-153-02 · Third Party Advisory

local run manager のその他の脆弱性

• CVE-2022-1524中 5.9LRM version 2.4 and lower does not implement TLS encryption. A malicious actor can MITM attack sensitive data in-transit, including credenti…
• CVE-2022-1519緊急 9.8LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including…
• CVE-2022-1518緊急 9.8LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.
• CVE-2022-1517緊急 9.8LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, whi…