CVE-2022-37706

🗓️ 25 Dec 2022 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 726 Views🌐 WEB

enlightenment_sys allows local privilege escalation via mishandling of pathnames

Reporter	Title	Published	Views	Family All 68
zdt	Ubuntu 22.04.1 X64 Desktop Enlightenment 0.25.3-1 Privilege Escalation Exploit	6 Oct 202200:00	–	zdt
zdt	Enlightenment v0.25.3 - Privilege escalation Vulnerability	2 Apr 202300:00	–	zdt
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	24 Jun 202613:15	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	18 Aug 202411:57	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	3 Jun 202401:17	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	10 Dec 202412:52	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	19 Jul 202423:12	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	10 Sep 202411:14	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	12 Sep 202219:22	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Enlightenment	18 Sep 202208:04	–	githubexploit

NVD

Node

Source	Link
git	www.git.enlightenment.org/enlightenment/enlightenment/commit/cc7faeccf77fef8b0ae70e312a21e4cde087e141
git	www.git.enlightenment.org/enlightenment/enlightenment/commit/cae78cbb169f237862faef123e4abaf63a1f5064
github	www.github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit

Parameter	Position	Path	Description	CWE
/bin/mount	path	/usr/lib/x86_64-linux-gnu/enlightenment/utils/enlightenment_sys	Vulnerable setuid Enlightenment binary used to perform command injection via crafted mount invocation	CWE-269
-o noexec,nosuid,utf8,nodev,iocharset=utf8,utf8=0,utf8=1,uid=$(id -u)",""/dev/../tmp/;/tmp/exploit"	path	/usr/lib/x86_64-linux-gnu/enlightenment/utils/enlightenment_sys	Vulnerable setuid Enlightenment binary used to perform command injection via crafted mount invocation	CWE-269
/tmp///net	path	/usr/lib/x86_64-linux-gnu/enlightenment/utils/enlightenment_sys	Vulnerable setuid Enlightenment binary used to perform command injection via crafted mount invocation	CWE-269
-o	path	/bin/mount	Mount command invoked by enlightenment_sys with a crafted path (/dev/../tmp/;/tmp/exploit) enabling arbitrary code execution as root	CWE-269
noexec,nosuid,utf8,nodev,iocharset=utf8,utf8=0,utf8=1,uid=$(id -u)	path	/bin/mount	Mount command invoked by enlightenment_sys with a crafted path (/dev/../tmp/;/tmp/exploit) enabling arbitrary code execution as root	CWE-269
"/dev/../tmp/;/tmp/exploit"	path	/bin/mount	Mount command invoked by enlightenment_sys with a crafted path (/dev/../tmp/;/tmp/exploit) enabling arbitrary code execution as root	CWE-269
/tmp///net	path	/bin/mount	Mount command invoked by enlightenment_sys with a crafted path (/dev/../tmp/;/tmp/exploit) enabling arbitrary code execution as root	CWE-269

17 Jun 2026 04:55Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.8

EPSS0.05531

SSVC