Unscored CVE-2022-23992 EUVD-2022-28907GHSA-59h2-qw44-f67r

XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could pote…

Published Feb 14, 2022 · Updated Aug 3, 2024 · Assigned by ca

Description

XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges.

Affected products

Vendor	Product	Affected	Fixed
—	XCOM Data Transport for Windows, Linux, and UNIX	11.6	—

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/XCOM-Data-Transport---Windows-and-XCOM-Data-Transport--Linux--UNIX-Vulnerability-CVE-2022-23992/18750