PT-2022-17640 · Rccmd · Rccmd

Hiroki Matsukuma · Published 2022-06-13 · Updated 2022-06-17 · CVE-2022-26041

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions RCCMD versions 4.26 and earlier

Description A directory traversal issue allows a remote authenticated attacker with administrative privileges to read or alter arbitrary files on the server via unspecified vectors.

Recommendations For RCCMD versions 4.26 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-26041

Affected Products

Rccmd

References · 7

• https://generex.de/support/downloads/software/rccmd/update · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26041 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26041 · Vendor Advisory
• https://jvn.jp/en/jp/JVN60801132/index.html · Note
• https://t.me/cibsecurity/44247 · Telegram Post
• https://t.me/cvenotify/31491 · Telegram Post
• https://t.me/cvenotify/31800 · Telegram Post