Lucene search
Piotr Bazydlo (@chudypb) of Trend Micro Zero Day InitiativeZDI-22-1180HistorySep 01, 2022 - 12:00 a.m.
ManageEngine NetFlow Analyzer getNmapInitialOption Command Injection Remote Code Execution Vulnerability
2022-09-0100:00:00
Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative
www.zerodayinitiative.com
18
remote code execution
authentication required
getnmapinitialoption function
lack of validation
user-supplied string
system call
context of system
EPSS
0.01
Percentile
83.9%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine NetFlow Analyzer. Authentication is required to exploit this vulnerability. The specific flaw exists within the getNmapInitialOption function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Related
cvelist
cvelist
CVE-2022-38772
2022-08-29 20:21:57
nvd
nvd
CVE-2022-38772
2022-08-29 21:15:09
prion
prion
Code injection
2022-08-29 21:15:00
cve
cve
CVE-2022-38772
2022-08-29 21:15:09