Lucene search

K
cvelistMitreCVELIST:CVE-2022-29806
HistoryApr 26, 2022 - 3:15 a.m.

CVE-2022-29806

2022-04-2603:15:08
mitre
www.cve.org
3
zoneminder
remote code execution
invalid language
debug log file
exploitability

AI Score

10

Confidence

High

EPSS

0.39

Percentile

97.3%

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.