Summary
Successful exploitation of this vulnerability could allow an attacker to execute malicious OS commands.
Vulnerabilities 1
-
Critical 9.8CVE-2022-2068 EPSS 96%
The c_rehash script allows command injection
In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was…
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-22-319-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-319-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-319-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf