PT-2022-15839 · Netmaster · Netmaster

Published 2022-01-18 · Updated 2022-01-26 · CVE-2022-23083

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NetMaster versions 12.2

Description The issue is related to a Cross-Site Scripting (XSS) vulnerability due to insufficient input validation in the ReportCenter UI. This could potentially allow an attacker to execute code on the affected machine.

Recommendations For version 12.2, consider implementing proper input validation in the ReportCenter UI to prevent XSS attacks. As a temporary workaround, restrict access to the ReportCenter UI to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-23083

Affected Products

Netmaster

References · 3

• https://osv.dev/vulnerability/CVE-2022-23083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23083 · Security Note
• https://support.broadcom.com/external/content/security-advisories/NetMaster-12.2-ReportCenter-Vulnerability-CVE-2022-23083/20049 · Vendor Advisory