Lucene search

K
cvelistMitreCVELIST:CVE-2022-24562
HistoryJun 16, 2022 - 6:31 p.m.

CVE-2022-24562

2022-06-1618:31:59
mitre
www.cve.org
2
iobit iotransfer
unauthenticated access
file-system
data theft
remote code execution

AI Score

10

Confidence

High

EPSS

0.394

Percentile

97.3%

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim’s endpoint, which can result in data theft and remote code execution.

AI Score

10

Confidence

High

EPSS

0.394

Percentile

97.3%