PT-2022-23473 · Wamp · Wamp

Published 2022-08-30 · Updated 2023-08-08 · CVE-2022-36565

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wamp versions 3.2.6 and below

Description The issue is related to incorrect access control in the install directory of Wamp, allowing authenticated attackers to execute arbitrary code by overwriting binaries in the directory.

Recommendations For Wamp versions 3.2.6 and below, update to a version above 3.2.6 to resolve the issue. As a temporary workaround, consider restricting access to the install directory to prevent overwriting of binaries.

Fix

Related Identifiers

CVE-2022-36565

Affected Products

Wamp

References · 4

• https://osv.dev/vulnerability/CVE-2022-36565 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36565 · Security Note
• https://github.com/ycdxsb/Vuln/blob/main/Wamp-Vuln/Wamp-Vuln.md · Note
• https://t.me/cibsecurity/49069 · Telegram Post