Lucene search
HistoryNov 25, 2022 - 7:15 p.m.
CVE-2022-41156
cve-2022-41156
insufficient verification
remote attacker
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.7%
Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attacker could exploit the vulnerability to cause remote code execution by causing an arbitrary user to download and execute malicious code.
Affected configurations
Node
microsoftwindowsMatch-
etm-sondiskplayeragentMatch1.3.8.12
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
| etm-s | ondiskplayeragent | 1.3.8.12 | cpe:2.3:a:etm-s:ondiskplayeragent:1.3.8.12:*:*:*:*:*:*:* |
Related
prion
prion
Remote code execution
2022-11-25 19:15:00
cvelist
cvelist
CVE-2022-41156 OndiskPlayer Remote Code Execution Vulnerability
2022-11-25 00:00:00
cve
cve
CVE-2022-41156
2022-11-25 19:15:11
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
41.7%
Related for NVD:CVE-2022-41156