Lucene search
HistoryOct 03, 2023 - 12:15 p.m.
CVE-2022-47893
remote code execution
netman 204
firmware upload
webshell
arbitrary code
root access
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
62.0%
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.
Affected configurations
Node
riello-upsnetman_204_firmware
riello-upsnetman_204Match-
Related
cve
cve
CVE-2022-47893
2023-10-03 12:15:10
prion
prion
Remote code execution
2023-10-03 12:15:00
cvelist
cvelist
CVE-2022-47893 NetMan 204 Remote Code Execution
2023-10-03 11:28:22
kitploit
kitploit
Thunderstorm - Modular Framework To Exploit UPS Devices
2023-03-06 11:30:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
62.0%
Related for NVD:CVE-2022-47893