Command injection

2023-01-2317:15:00

PRIOn knowledge base

www.prio-n.com

management portal

authenticated attackers

arbitrary commands

specially crafted payload

unauthenticated context

nvd

0.017 Low

EPSS

Percentile

87.8%

JSON

The management portal component of JetNexus/EdgeNexus ADC 4.2.8 was discovered to contain a command injection vulnerability. This vulnerability allows authenticated attackers to execute arbitrary commands through a specially crafted payload. This vulnerability can also be exploited from an unauthenticated context via unspecified vectors

CPENameOperatorVersion
application_delivery_controllereq4.2.8

CPE	Name	Operator	Version
	application_delivery_controller	eq	4.2.8

References

www.cryptnetix.com/blog/2022/09/14/Edge-Nexus-Vulnerability-Disclosure.html

www.edgenexus.io/products/load-balancer/

0.017 Low

EPSS

Percentile

87.8%

JSON

Related for PRION:CVE-2022-37718