Remote code execution

2022-06-2415:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

JSON

LRM does not restrict the types of files that can be uploaded to the affected product. A malicious actor can upload any file type, including executable code that allows for a remote code exploit.

CPENameOperatorVersion
local_run_managerge1.3
local_run_managerle3.1

CPE	Name	Operator	Version
	local_run_manager	ge	1.3
	local_run_manager	le	3.1

References

www.cisa.gov/uscert/ics/advisories/icsa-22-153-02