Description
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Keysight Technologies Sensor Management Server | Keysight Technologies Sensor Management Server v2.4.0 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution http/cves/2022/CVE-2022-38130.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.