CVE-2022-24388

🗓️ 17 May 2022 19:30:26Reported by FidelisType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 69 Views

Vulnerability in rconfig “date” enables an attacker with user level access to inject root level commands into Fidelis Network and Deception components

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-24388	16 May 202215:30	–	attackerkb
Circl	CVE-2022-24388	18 May 202200:28	–	circl
CNNVD	Fidelis Network Deception 命令注入漏洞	17 May 202200:00	–	cnnvd
CNVD	Fidelis Network Deception Command Injection Vulnerability (CNVD-2022-59170)	19 May 202200:00	–	cnvd
Cvelist	CVE-2022-24388 Authenticated Privileged Command Injection Vulnerability in Fidelis Network and Deception	17 May 202219:30	–	cvelist
EUVD	EUVD-2022-29280	3 Oct 202520:07	–	euvd
NVD	CVE-2022-24388	17 May 202220:15	–	nvd
Prion	Design/Logic Flaw	17 May 202220:15	–	prion

NVD

Node

fidelissecurity deceptionRange<9.4.5

fidelissecurity networkRange<9.4.5

[
  {
    "platforms": [
      "CentOS"
    ],
    "product": "Fidelis Network",
    "vendor": "Fidelis Cybersecurity",
    "versions": [
      {
        "lessThan": "9.4.5",
        "status": "affected",
        "version": "Fidelis Network",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "CentOS"
    ],
    "product": "Fidelis Deception",
    "vendor": "Fidelis Cybersecurity",
    "versions": [
      {
        "lessThan": "9.4.5",
        "status": "affected",
        "version": "Fidelis Deception",
        "versionType": "custom"
      }
    ]
  }
]