PT-2022-14896 · Unknown · Masuit.Tools.Core

Keyang Yin + 2 · Published 2022-05-01 · Updated 2022-10-07 · CVE-2022-21167

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Masuit.Tools.Core versions all

Description The issue concerns Arbitrary Code Execution via the ReceiveVarData function in the SocketClient.cs component. This occurs because the socket client transmission lacks appropriate restrictions or type bindings for the BinaryFormatter, allowing a payload to be passed via user-controllable input after the connection is established.

Recommendations For all versions, consider disabling the ReceiveVarData function in the SocketClient.cs component as a temporary workaround until a patch is available. Restrict access to the SocketClient.cs component to minimize the risk of exploitation. Avoid using the BinaryFormatter without proper restrictions or type bindings in the affected component until the issue is resolved.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-21167

GHSA-VH38-GHX6-VMVG

SNYK-DOTNET-MASUITTOOLSCORE-2316875

Affected Products

Masuit.Tools.Core

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-21167 · Security Note
• https://osv.dev/vulnerability/CVE-2022-21167 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vh38-ghx6-vmvg · Vendor Advisory
• https://github.com/ldqk/Masuit.Tools/blob/327f42b9f20f25bb66188672199c8265fc968d91/Masuit.Tools.Abstractions/Net/SocketClient.cs%23L197 · Note
• https://github.com/ldqk/Masuit.Tools · Note
• https://snyk.io/vuln/SNYK-DOTNET-MASUITTOOLSCORE-2316875 · Note