CVE-2022-24262

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute…

published February 4, 2022

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute arbitrary commands via a crafted file in the web root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01825 · 78.6th percentile
Published
2022-02-04T16:10Z
EPSS history
Timeline
  • 04 FEB 16:10Z
    The config restore function of Voipmonitor GUI before v24.96 does not properly check files sent as restore archives, allowing remote attackers to execute…
    cvelistv5