Lucene search

K
cveMitreCVE-2022-23334
HistoryJan 30, 2023 - 4:15 p.m.

CVE-2022-23334

2023-01-3016:15:08
CWE-347
mitre
web.nvd.nist.gov
23
cve-2022-23334
robot application
ip-label newtest
weak signature checks
privilege escalation
newtestremotemanager.exe

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

69.1%

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.

Affected configurations

Nvd
Node
ip-labelnewtestRange<8.5r0
VendorProductVersionCPE
ip-labelnewtest*cpe:2.3:a:ip-label:newtest:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

69.1%

Related for CVE-2022-23334