CVE-2022-47526

2023-05-3000:00:00

mitre

www.cve.org

fox-it datadiode

path traversal

arbitrary file writing

remote attacker

arbitrary code execution

user interaction

9.8 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.5%

JSON

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.