VULNERABILITY INTELLIGENCE

CVE-2022-1410

CVSS score8 HIGH
EPSS probability1.06%
CISA KEVNot currently listed
Published2022-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This issue affects: Device42 CMDB version 18.01.00 and prior versions.

Weakness classification

  • cve-requests@bitdefender.com: CWE-78
  • nvd@nist.gov: CWE-78

Primary references