Lucene search

MitreCVE-2022-43030

HistoryNov 14, 2022 - 11:15 p.m.

CVE-2022-43030

2022-11-1423:15:11

CWE-521

mitre

web.nvd.nist.gov

cve-2022-43030

siyucms

rce

vulnerability

thinkpap5

adminlte

nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.045

Percentile

92.5%

JSON

Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a content management system based on ThinkPaP5 AdminLTE. SIYUCMS has a background command execution vulnerability, which can be used by attackers to gain server privileges

Affected configurations

Nvd

Node

siyucmssiyucmsMatch6.1.7

VendorProductVersionCPE
siyucmssiyucms6.1.7cpe:2.3:a:siyucms:siyucms:6.1.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siyucms	siyucms	6.1.7	cpe:2.3:a:siyucms:siyucms:6.1.7:::::::*

References

github.com/cai-niao98/siyu

github.com/cai-niao98/siyu/blob/main/README.md

Social References

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.045

Percentile

92.5%

JSON

Related for CVE-2022-43030