CVE-2022-1524

Mô tả

Tham khảo

• cisa.gov/uscert/ics/advisories/icsa-22-153-02 · Third Party Advisory

Lỗ hổng khác của local run manager

• CVE-2022-1521NGHIÊM TRỌNG 9.1LRM does not implement authentication or authorization by default. A malicious actor can inject, replay, modify, and/or intercept sensitive …
• CVE-2022-1519NGHIÊM TRỌNG 9.8LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including…
• CVE-2022-1518NGHIÊM TRỌNG 9.8LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.
• CVE-2022-1517NGHIÊM TRỌNG 9.8LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, whi…