CVE-2022-37901

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2022-37901

ArubaOS CLI authenticated command injection vulnerability CVE-2022-37901. An attacker with valid credentials can execute arbitrary commands with privileged OS privileges via the ArubaOS command line interface. CVSSv3.1 base score 7.2 (Network, Low attack complexity, High privileges required, No u...

CVE-2022-37899

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...

Command injection

D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via a crafted packet...

PT-2022-22948 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: A locally authenticated attacker could execute arbitrary commands on the system by sending a specially crafted request. Recommendations: For IBM InfoSphere Information Server version...

CVE-2022-22425

"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."...

PT-2022-24134 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation allows attackers to execute arbitrary commands as a...

D-Link DIR882 Command Injection (CVE-2022-28895; CVE-2022-28896)

A command injection vulnerability exists in D-Link DIR882. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-35717

"IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-"Force ID: 231361...

PT-2022-24131 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to execute...

CVE-2022-22425

IBM InfoSphere Information Server 11.7 is identified as potentially vulnerable to CSV Injection due to improper validation of CSV file contents. The vulnerability could allow a remote attacker to execute arbitrary commands on the system; CVSS metrics in public records indicate a high impact (C, I...

The vulnerability of the D-Link DSL-2750B router’s microprogramming software lies in the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the D-Link DSL-2750B router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the login.cgi parameter...

CVE-2022-40741

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service...

Command injection

Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service...

PT-2022-25503 · Unknown · Mail Sqr Expert

Name of the Vulnerable Software and Affected Versions: Mail SQR Expert affected versions not specified Description: The issue is related to insufficient filtering for special characters in a specific function of Mail SQR Expert. This allows an unauthenticated remote attacker to exploit the issue...

The vulnerability of the Fortinet FortiClient for Mac security tool arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to bypass security restrictions and execute arbitrary commands.

The vulnerability of the Fortinet FortiClient for Mac protection tool is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows an attacker to bypass security restrictions and execute arbitrary commands...

VMware Cloud Foundation XStream Deserialization

Added: 10/31/2022 Background VMware Cloud Foundation is a hybrid cloud platform. Problem An XStream deserialization vulnerability in the NSM Manager component of VMware Cloud Foundation NSX-V allows a remote attacker to execute arbitrary commands. Resolution Apply the patch referenced in...

Snapt Aria Command Injection (CVE-2022-24237)

A command injection vulnerability exists in Snapt Aria. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

VMware Cloud Foundation XStream Deserialization

Added: 10/31/2022 Background VMware Cloud Foundation is a hybrid cloud platform. Problem An XStream deserialization vulnerability in the NSM Manager component of VMware Cloud Foundation NSX-V allows a remote attacker to execute arbitrary commands. Resolution Apply the patch referenced in...

Design/Logic Flaw

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands o...