PT-2022-7169 · Ericsson · Ericsson Evolved Packet Gateway

Andrea Carlo Maria Dattola + 2 · Published 2022-12-19 · Updated 2023-12-11 · CVE-2022-47531

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ericsson Evolved Packet Gateway (EPG) versions 2.x before 2.16 Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25

Description The issue is related to the command-line interface (CLI) of the Ericsson Evolved Packet Gateway (EPG) and is associated with access control deficiencies. Exploitation of the issue may allow a remote attacker to execute arbitrary commands. Authenticated users can bypass the system CLI and execute commands they are authorized to execute directly in the UNIX shell.

Recommendations For Ericsson Evolved Packet Gateway (EPG) versions 2.x before 2.16, update to version 2.16 or later to resolve the issue. For Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25, update to version 3.25 or later to resolve the issue. As a temporary workaround, consider restricting access to the CLI to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2023-08568

CVE-2022-47531

Affected Products

Ericsson Evolved Packet Gateway

References · 9

• https://bdu.fstec.ru/vul/2023-08568 · Security Note
• https://osv.dev/vulnerability/CVE-2022-47531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47531 · Security Note
• https://ericsson.com/en/portfolio/cloud-software-and-services/cloud-core/packet-core/cloud-packet-core/evolved-packet-gateway · Note
• https://gruppotim.it/it/footer/red-team.html · Note
• https://t.me/cvenotify/62268 · Telegram Post
• https://t.me/cvenotify/63153 · Telegram Post
• https://twitter.com/CVEnew/status/1731911492042440975 · Twitter Post
• https://vuldb.com/ru/?id.246822 · Note