Lucene search

MitreCVE-2022-46996

HistoryDec 14, 2022 - 3:15 p.m.

CVE-2022-46996

2022-12-1415:15:10

mitre

web.nvd.nist.gov

vsphere_selfuse

code execution

backdoor

cve-2022-46996

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.004

Percentile

72.5%

JSON

vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Affected configurations

Nvd

Node

vsphere_selfuse_projectvsphere_selfuseMatch2019-07-22

VendorProductVersionCPE
vsphere_selfuse_projectvsphere_selfuse2019-07-22cpe:2.3:a:vsphere_selfuse_project:vsphere_selfuse:2019-07-22:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vsphere_selfuse_project	vsphere_selfuse	2019-07-22	cpe:2.3:a:vsphere_selfuse_project:vsphere_selfuse:2019-07-22:::::::*

References

github.com/SHenry07/vSphere_selfuse/

github.com/SHenry07/vSphere_selfuse/issues/39

mirrors.neusoft.edu.cn/pypi/web/simple/request/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.004

Percentile

72.5%

JSON

Related for CVE-2022-46996