Design/Logic Flaw

2022-03-3123:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

CPENameOperatorVersion
xshellle7.0.0099

CPE	Name	Operator	Version
	xshell	le	7.0.0099

References

github.com/ycdxsb/Vuln/blob/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xshell-CreateProcessW-Misuse-Binary-Hijack

www.netsarang.com/en/xshell-update-history/