CVE-2022-26041

2022-06-1304:50:25

jpcert

www.cve.org

cve-2022-26041

directory traversal

rccmd 4.26

remote attack

administrative privilege

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

49.6%

JSON

Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitrary file on the server via unspecified vectors.

CNA Affected

[
  {
    "product": "RCCMD",
    "vendor": "GENEREX SYSTEMS Computervertriebsgesellschaft mbH",
    "versions": [
      {
        "status": "affected",
        "version": "4.26 and earlier"
      }
    ]
  }
]