PT-2022-15765

CVE-2022-22995

·

Published

2022-03-25

·

Updated

2026-10-31

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions SMB and AFP (affected versions not specified)
Description The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting this combination of primitives, an attacker can execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-59: Improper Link Resolution Before File Access (\'Link Following\')
Related identifiers
CVE-2022-22995
ALT-PU-2023-6197
ALT-PU-2024-10857
ALT-PU-2024-17688
CLEANSTART-2023-WM40998
DLA-3706-1
DLA-3968-1
MGASA-2024-0201
SUSE-SU-2023:4084-1
SUSE-SU-2023_4084-1
USN-6786-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com