CVE-2022-23992

XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges.

Score

CVSS 3.1 9.8 Critical

Status

Modified - vuln@ca.com

Published

2022-02-14

Last modified

2024-08-03

Weaknesses

CWE-20

Affected products

• Xcom Data Transport (Broadcom)

References

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/XCOM-Data-Trans…