VULNERABILITY INTELLIGENCE

CVE-2022-45140

CVSS score9.8 CRITICAL
EPSS probability1.07%
CISA KEVNot currently listed
Published2023-02-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.

Weakness classification

  • info@cert.vde.com: CWE-306

Primary references