Skip to content
OpenAdvisories
Low · 3.8 CVE-2022-25619 EUVD-2022-30279GHSA-4j7w-gj5j-f325

Authenticated Command Injection to RCE

Published Mar 30, 2022 · Updated Aug 3, 2024 · Assigned by Profelis

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86.

Affected products

VendorProductAffectedFixed
Profelis IT Consultancy SambaBox 4.0 – ≤ 4.0 —

References