CVE-2022-39057

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service.

Score
CVSS 3.1 7.2 High
Status
Modified - twcert@cert.org.tw
Published
2022-10-18
Last modified
2025-05-08
Weaknesses
CWE-78

Affected products

References

 
 
© AVABIS GmbH privacypolicy about