CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab files. The patch for this was present in SNYPR version 6.4 Jun 2022 R3_[06170871], but may have been introduced sooner.

CVSS v3 8.7 HIGH

8.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.3 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://conway.scot/securonix-rce/	Exploit Third Party Advisory
https://conway.scot/securonix-rce/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:securonix:snypr:6.4:*:*:*:*:*:*:*

History

21 Nov 2024, 07:14

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.2~~	v2 : unknown v3 : 8.7
References	~~() https://conway.scot/securonix-rce/ - Exploit, Third Party Advisory~~	() https://conway.scot/securonix-rce/ - Exploit, Third Party Advisory

Information

Published : 2022-09-07 14:15

Updated : 2024-11-21 07:14

NVD link : CVE-2022-37108

Mitre link : CVE-2022-37108

CVE.ORG link : CVE-2022-37108

JSON object : View

Products Affected

securonix

snypr

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

{"id": "CVE-2022-37108", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 5.8, "exploitabilityScore": 2.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2022-09-07T14:15:09.157", "references": [{"url": "https://conway.scot/securonix-rce/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://conway.scot/securonix-rce/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-74"}]}], "descriptions": [{"lang": "en", "value": "An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the \"Manage Ingesters\" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab files. The patch for this was present in SNYPR version 6.4 Jun 2022 R3_[06170871], but may have been introduced sooner."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n en el asistente de configuraci\u00f3n de syslog-ng en Securonix Snypr versi\u00f3n 6.4, permite que un usuario de la aplicaci\u00f3n con el permiso \"Manage Ingesters\" ejecute c\u00f3digo arbitrario en los ingesters remotos al a\u00f1adir texto arbitrario a los archivos de texto que son ejecutados por el sistema, como los archivos crontab de los usuarios. El parche para esto estaba presente en la versi\u00f3n 6.4 Jun 2022 R3_[06170871] de SNYPR, pero puede haber sido introducido antes"}], "lastModified": "2024-11-21T07:14:28.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:securonix:snypr:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "294463B2-F266-4C2C-8AC1-23CD10BB8CD9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}