CVE-2022-28054

2022-05-0213:33:57

mitre

www.cve.org

improper sanitization

trigger action scripts

vandyke software vshell

arbitrary code execution

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

71.9%

JSON

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.

References

www.vandyke.com/support/advisory/2022/02/remote-execution-via-triggers.html