CVE-2022-23334 in Newtest

Сводка

по MITRE • 30.01.2023

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Резервировать: 18.01.2022
• Раскрытие: 30.01.2023
• Модерация: принято
• Вход: VDB-219761
• CPE: готов
• CWE: CWE-347 (Подтверждённый)
• CVSS: 9.8 (NVD)
• EPSS: 0.00413
• KEV: Нет
• Деятельности: Очень низкий

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-23334
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-23334
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-23334/