Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70074
HistoryJan 06, 2022 - 12:00 a.m.

Controlup Real-Time Agent Command Injection Vulnerability

2022-01-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.0004 Low

EPSS

Percentile

13.1%

Controlup Real-Time Agent is a real-time agent from Controlup, Inc. A command injection vulnerability exists in Controlup Real-Time Agent, which originates from an unauthenticated named pipe channel in Controlup Real-Time Agent, and can be exploited by attackers to Run OS commands via the ProcessActionRequest WCF method.

CPENameOperatorVersion
controlup real-time agentlt8.5

0.0004 Low

EPSS

Percentile

13.1%

Related for CNVD-2022-70074