Fidelis Network Deception Command Injection Vulnerability (CNVD-2022-59171)

Fidelis Network Deception is a security product from Fidelis USA. A security vulnerability exists in versions prior to Fidelis Network Deception 9.4.5, which stems from a faulty remote_text_file in rconfig, to detect threats and prevent data loss, detect malicious behavior, identify traffic anomalies, and automatically respond to advanced threats. An attacker with CLI user-level access could exploit the vulnerability to inject root-level commands.