Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.fox-it.com/nl-en/fox-crypto/fox-datadiode/ - Product | |
| References | () https://www.fox-it.com/nl-en/software-vulnerability-report/ - Product |
07 Jun 2023, 15:10
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 | |
| First Time |
Fox-it fox Datadiode Firmware
Fox-it Fox-it fox Datadiode |
|
| CPE | cpe:2.3:o:fox-it:fox_datadiode_firmware:3.4.3:*:*:*:*:*:*:* cpe:2.3:h:fox-it:fox_datadiode:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.fox-it.com/nl-en/software-vulnerability-report/ - Product | |
| References | (MISC) https://www.fox-it.com/nl-en/fox-crypto/fox-datadiode/ - Product | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
31 May 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-31 00:15
Updated : 2024-11-21 07:32
NVD link : CVE-2022-47526
Mitre link : CVE-2022-47526
CVE.ORG link : CVE-2022-47526
JSON object : View
Products Affected
fox-it
- fox_datadiode
- fox_datadiode_firmware
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')