CVE-2022-34824

Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0…

Critical · published November 8, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
68.1
In the wild
Unconfirmed
What it is

🚨 A remote attacker could overwrite files on your system like it's a free-for-all garage sale! 🔥 Think of it like a pesky intruder sneaking into your workshop and freely rearranging or destroying your carefully organized tools without permission — total chaos! If exploited, a malicious actor could not only overwrite critical files but potentially execute arbitrary code, leading to a complete takeover of your system. Imagine someone not only breaking in but also altering your blueprints and executing their own designs! It's absolutely devastating.

Put simply

Think of it like a pesky intruder sneaking into your workshop and freely rearranging or destroying your carefully organized tools without permission — total chaos! This vulnerability arises from weak file and folder permissions in CLUSTERPRO X and EXPRESSCLUSTER X, allowing unauthenticated remote attackers to modify files at will.

What to do

If exploited, a malicious actor could not only overwrite critical files but potentially execute arbitrary code, leading to a complete takeover of your system. Imagine someone not only breaking in but also altering your blueprints and executing their own designs! It's absolutely devastating. To safeguard your system, patch immediately to the latest version of CLUSTERPRO X or EXPRESSCLUSTER X that addresses this vulnerability. Additionally, review and tighten file and folder permission settings to ensure only authorized users have access. Don't forget to audit your systems for any unauthorized changes! You've got this! Follow these steps, and you'll secure your setup in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01206 · 68.1th percentile
Published
2022-11-08T00:00Z
EPSS history
Timeline
  • 08 NOV 00:00Z
    Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0…
    cvelistv5