VULNERABILITY INTELLIGENCE

CVE-2022-37903

CVSS score7.2 HIGH
EPSS probability0.86%
CISA KEVNot currently listed
Published2022-12-12
Last modified2026-10-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled content via the web interface. Successful exploitation of this vulnerability could lead to full compromise the underlying host operating system.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references