CVE-2022-21810

The CVE-2022-21810 entry concerns the node package smartctl . The vulnerability is a command injection via the package’s info method caused by improper input sanitization. Affected software is the smartctl package (JavaScript/node module); impact is described as high (C, I, A all High) with local...

PT-2023-12672 · Smartctl · Smartctl

Name of the Vulnerable Software and Affected Versions: smartctl versions all Description: The issue is related to Command Injection via the info method due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated number of potentially...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection via the info method due to improper input sanitization. PoC js const smartctl = require'smartctl'; smartctl.info';touch EXPLOITED;', function; Remediation There is no fixed version for smartctl. References - Vulnerable...