PT-2022-2237
CVE-2022-22945
·
Published
2022-02-15
·
Updated
2022-02-24
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
VMware NSX Edge (affected versions not specified)
Description
The issue is related to a CLI shell injection vulnerability in VMware NSX Edge. A malicious actor with SSH access to an NSX-Edge appliance can execute arbitrary commands on the operating system as root. This vulnerability exists due to the lack of measures to neutralize special elements used in the operating system command.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾