Lucene search
HistorySep 16, 2022 - 3:15 a.m.
CVE-2022-36534
cve-2022-36534
super flexible software
syncovery
linux
rce
job_executebefore
job_executeafter
post_profilesettings.php
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.288 Low
EPSS
Percentile
96.9%
Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote code execution (RCE) vulnerabilities via the Job_ExecuteBefore and Job_ExecuteAfter parameters at post_profilesettings.php.
Affected configurations
Node
syncoverysyncoveryRange8.00–9.48j
linuxlinux_kernelMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| syncovery:syncovery | syncovery | lt | 9.48j |
References
Social References
More
Related
nvd
nvd
CVE-2022-36534
2022-09-16 03:15:09
cvelist
cvelist
CVE-2022-36534
2022-09-16 00:00:00
zdt
zdt
Syncovery For Linux Web-GUI Authenticated Remote Command Execution Exploit
2022-12-15 00:00:00
packetstorm
packetstorm
Syncovery For Linux Web-GUI Authenticated Remote Command Execution
2022-12-15 00:00:00
prion
prion
Remote code execution
2022-09-16 03:15:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-12-16 21:37:26
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.288 Low
EPSS
Percentile
96.9%
Related for CVE-2022-36534