Skip to content
OpenAdvisories
High · 7.8 CVE-2022-41156 EUVD-2022-44397GHSA-qmvv-qv49-vc54

OndiskPlayer Remote Code Execution Vulnerability

Published Nov 25, 2022 · Updated Apr 23, 2025 · Assigned by krcert

Description

Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attacker could exploit the vulnerability to cause remote code execution by causing an arbitrary user to download and execute malicious code.

Affected products

VendorProductAffectedFixed
ETMS OndiskPlayerAgent 1.3.8.12 —

References