CVE-2022-41642

2022-12-0500:00:00

jpcert

www.cve.org

nadesiko3

pc version

command injection

EPSS

0.005

Percentile

77.8%

JSON

OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.

CNA Affected

[
  {
    "vendor": "kujirahand",
    "product": "Nadesiko3 (PC Version)",
    "versions": [
      {
        "version": "v3.3.61 and earlier",
        "status": "affected"
      }
    ]
  }
]