COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2022-24562

CVE-2022-24562

Severity
critical
Source
NVD · cve
Published
2022-06-16
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2022-24562
⚡ RCE shame 50/100 rce

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which can result in data theft and remote code execution.

Players implicated

iobit · vendoriotransfer · product

Description

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which can result in data theft and remote code execution.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.