CVE-2022-45477

2022-12-0500:00:00

CWE-306

SNPS

www.cve.org

telepad

remote code execution

vulnerability

unauthenticated

server

execute arbitrary code

authorization

authentication

cvss

remote

execute

10 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.0%

JSON

Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA Affected

[
  {
    "vendor": "Telepad",
    "product": "Telepad",
    "versions": [
      {
        "version": "<= 1.0.7",
        "status": "affected"
      }
    ]
  }
]