PT-2022-27087 · Russound · Russound Xsourceplayer 777D
CVE-2022-44038
·
Published
2022-11-29
·
Updated
2022-12-01
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Russound XSourcePlayer 777D version 06.08.03
Description
The issue is related to a remote code execution vulnerability via the scriptRunner.cgi component.
Recommendations
For Russound XSourcePlayer 777D version 06.08.03, consider disabling the scriptRunner.cgi component as a temporary workaround until a patch is available. Restrict access to the scriptRunner.cgi component to minimize the risk of exploitation.
Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Russound Xsourceplayer 777D