CVE-2022-1410 Remote Code Execution in Device42 ApplianceManager console

OS Command Injection vulnerability in the dboptimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This issue affects: Device42 CMDB version 18.01.00 and prior versions...

CVE-2022-1410

CVE-2022-1410 is an OS command injection vulnerability in the db_optimize component of the Device42 Asset Management Appliance (Device42 CMDB 18.01.00 and earlier). The root cause is an OS command injection that could allow an authenticated attacker to execute remote code on the appliance, with h...

Critical Flaws Disclosed in Device42 IT Asset Management Software

Cybersecurity researchers have disclosed multiple severe security vulnerabilities asset management platform Device42 that, if successfully exploited, could enable a malicious actor to seize control of affected systems. "By exploiting these issues, an attacker could impersonate other users, obtain...