Remote code execution

2022-09-2800:15:00

PRIOn knowledge base

www.prio-n.com

wazuh

remote code execution

version 3.6.1

version 3.13.5

version 4.0.0

version 4.2.7

version 4.3.0

version 4.3.7

authenticated vulnerability

active response endpoint

0.003 Low

EPSS

Percentile

66.2%

JSON

Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.

CPENameOperatorVersion
wazuhge3.6.1
wazuhle3.13.5
wazuhge4.0.0
wazuhle4.2.7
wazuhge4.3.0
wazuhle4.3.7

Name	Operator	Version
wazuh	ge	3.6.1
wazuh	le	3.13.5
wazuh	ge	4.0.0
wazuh	le	4.2.7
wazuh	ge	4.3.0
wazuh	le	4.3.7

References

github.com/wazuh/wazuh/pull/14801

0.003 Low

EPSS

Percentile

66.2%

JSON

Related for PRION:CVE-2022-40497