PT-2022-6051 · Hirschmann · Hirschmann Bat-C2

Thomas Weber · Published 2022-11-25 · Updated 2025-04-29 · CVE-2022-40282

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hirschmann BAT-C2 versions prior to 09.13.01.00R04

Description The issue is related to insufficient argument checking in the FsCreateDir Ajax function of the Hirschmann BAT-C2's web interface, allowing an authenticated attacker to inject commands. This can be achieved by exploiting the dir parameter, enabling the attacker to execute arbitrary commands on the system.

Recommendations For versions prior to 09.13.01.00R04, update to version 09.13.01.00R04 or later to resolve the issue. As a temporary workaround, consider restricting access to the FsCreateDir Ajax function to minimize the risk of exploitation. Additionally, avoid using the dir parameter in the affected function until the issue is resolved.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2022-07515

CVE-2022-40282

Affected Products

Hirschmann Bat-C2

References · 12

• 🔥 http://seclists.org/fulldisclosure/2022/Nov/19 · Exploit
• 🔥 http://packetstormsecurity.com/files/170063/Hirschmann-Belden-BAT-C2-8.8.1.0R8-Command-Injection.html · Exploit
• https://bdu.fstec.ru/vul/2022-07515 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-40282 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40282 · Vendor Advisory
• https://t.me/cibsecurity/53489 · Telegram Post
• https://t.me/cvenotify/120198 · Telegram Post
• https://packetstormsecurity.com/files/170063/Hirschmann-Belden-BAT-C2-8.8.1.0R8-Command-Injection.html · Note
• https://t.me/cvenotify/38842 · Telegram Post
• https://belden.com/dfsmedia/f1e38517e0cd4caa8b1acb6619890f5e/15088-source · Note
• https://t.me/cvenotify/38449 · Telegram Post
• https://belden.com/support/security-assurance · Note