PT-2022-23835 · Paymoney · Paymoney

Saitamang · Published 2022-09-14 · Updated 2022-09-16 · CVE-2022-37140

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PayMoney version 3.3

Description The issue is related to Client Side Remote Code Execution (RCE) and exists in the reply ticket function, where uploading a malicious file can lead to execution of remote code. When a victim downloads and opens the malicious RTF file, a calculator will open, demonstrating the vulnerability.

Recommendations For PayMoney version 3.3, as a temporary workaround, consider disabling the reply ticket function until a patch is available. Restrict access to uploading files to minimize the risk of exploitation. Avoid using the vulnerable function to open RTF files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-37140

Affected Products

Paymoney

References · 6

• 🔥 https://github.com/saitamang/POC-DUMP/tree/main/PayMoney · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-37140 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37140 · Vendor Advisory
• https://paymoney.techvill.org · Vendor Advisory
• https://t.me/cibsecurity/49761 · Telegram Post
• https://t.me/cvenotify/36291 · Telegram Post