CVE-2022-0997 Local Privilege Escalation Vulnerability in Fidelis Network and Deception

Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands being run as root upon subsequent logon by a...

PT-2022-16663

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows an attacker with user-level access to the CLI to inject root-level commands into various Fidelis components, including CommandPost, Collector, Sensor, and...

CVE-2022-0486: Incorrect Default Permissions

Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is...

PT-2022-16669

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows authenticated command injection through the web interface using the filename parameter with the value "update checkfile". This could enable a specially crafted...

PT-2022-13209

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue is related to improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components, allowing an attacker with local, administrative access to the CL...

PT-2022-16666

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows SQL injection through the web interface by an attacker with user level access. Patches and updates are available to address this issue. Recommendations For...

CVE-2022-24392: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feedcommtest” value for the “feed” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and...

CVE-2022-24393: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “checkverticaupgrade” value for the “cpIp” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost...

PT-2022-16668

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows authenticated command injection through the web interface using the check vertica upgrade value for the cpIp parameter. This could enable a specially crafted HT...

PT-2022-16667

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows authenticated command injection through the web interface using the feed parameter with the value feed comm test. This could enable a specially crafted HTTP...

PT-2022-13580

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue is related to improper file permissions in certain components, allowing an attacker with local administrative access to modify script files. This could result in...

PT-2022-16665

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows an attacker with user-level access to the CLI to inject user-level commands into Fidelis Network and Deception components, including CommandPost, Collector,...

CVE-2022-0997: Incorrect Default Permissions

Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands being run as root upon subsequent logon by a...

CVE-2022-24394: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “updatecheckfile” value for the “filename” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost...

PT-2022-16664

Name of the Vulnerable Software and Affected Versions Fidelis Network and Deception versions prior to 9.4.5 Description The issue allows an attacker with user-level access to the CLI to inject root-level commands into various Fidelis components, including CommandPost, Collector, Sensor, and...

CVE-2022-24388: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fidelis Network...

CVE-2022-24389: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in rconfig “certutils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fidelis...

CVE-2022-24391: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability...

CVE-2022-24390: Improper Neutralization of Special Elements used in an OS Command

Vulnerability in rconfig “remotetextfile” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fideli...

CVE-2021-35050: Storing Passwords in a Recoverable Format

User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is present in Fidelis Network and Deception versio...