PT-2023-8046 · Microchip Technology · Syncserver S650

Barbarisch · Publicado 2023-02-13 · Atualizado 2025-03-21 · CVE-2022-40022

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microchip Technology (Microsemi) SyncServer S650 (affected versions not specified)

Description The issue is related to a command injection vulnerability in the web interface of the SyncServer S650 software due to insufficient input validation. This vulnerability can be exploited by a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2024-00023

CVE-2022-40022

Produtos afetados

Syncserver S650

Referências · 14

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symmetricom_syncserver_rce.rb · Exploit
• https://microsemi.com/campaigns/network-time-servers/syncserver-s600/?url= · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-40022 · Nota de Segurança
• https://securifera.com/advisories/CVE-2022-40022 · Nota
• https://bdu.fstec.ru/vul/2024-00023 · Nota de Segurança
• https://microsemi.com/campaigns/network-time-servers/S650p/%3Fgd%3D1&id=5&gclid=Cj0KCQjwjbyYBhCdARIsAArC6LL-202ej5YfDB5lMIMSZ2735qjo5yaj2i-PrvLv2Cnh_kIJtFJ0oF8aAlMpEALw_wcB · Nota
• http://packetstormsecurity.com/files/172907/Symmetricom-SyncServer-Unauthenticated-Remote-Command-Execution.html · Nota
• https://microsemi.com/document-portal/doc_download/135737-datasheet-syncserver-s650 · Nota
• https://vuldb.com/?id.220811 · Nota
• https://t.me/cvenotify/115734 · Publicação no Telegram
• https://microsemi.com/campaigns/network-time-servers/S650p/%3Fgd%3D1&id=5&gclid=Cj0KCQjwjbyYBhCdARIsAArC6LL-202ej5YfDB5lMIMSZ2735qjo5yaj2i-PrvLv2Cnh_kIJtFJ0oF8aAlMpEALw_wcB · Nota
• https://t.me/cvenotify/44267 · Publicação no Telegram
• https://t.me/cvenotify/52276 · Publicação no Telegram
• https://t.me/cvenotify/44828 · Publicação no Telegram