Lucene search
INCIBECVELIST:CVE-2022-47893HistoryOct 03, 2023 - 11:28 a.m.
CVE-2022-47893 NetMan 204 Remote Code Execution
2023-10-0311:28:22
CWE-434
INCIBE
www.cve.org
2
cve-2022-47893
netman 204
remote code execution
firmware
arbitrary code
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.003
Percentile
68.6%
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Netman-204",
"vendor": "Riello UPS",
"versions": [
{
"lessThanOrEqual": "all versions",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
prion
prion
Remote code execution
2023-10-03 12:15:00
cve
cve
CVE-2022-47893
2023-10-03 12:15:10
vulnrichment
vulnrichment
CVE-2022-47893 NetMan 204 Remote Code Execution
2023-10-03 11:28:22
nvd
nvd
CVE-2022-47893
2023-10-03 12:15:10
kitploit
kitploit
Thunderstorm - Modular Framework To Exploit UPS Devices
2023-03-06 11:30:00
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.003
Percentile
68.6%
Related for CVELIST:CVE-2022-47893