CVE-2022-41572

An issue was discovered in EyesOfNetwork (EON) through 5.3.11

Critical · published January 7, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

🔥 An attacker can run nmap as root, turning EON into their own playground! This privilege escalation flaw is no joke! Think of it like a security guard who leaves the front door wide open while monitoring the security feeds — if someone can get past their attention, they can walk right in and take over the entire building! With this vulnerability, an attacker could gain total control over the server, allowing them to access sensitive data, alter configurations, or even bring the entire system down. It's absolutely devastating for organizations relying on EON for monitoring and managing their networks!

Put simply

Think of it like a security guard who leaves the front door wide open while monitoring the security feeds — if someone can get past their attention, they can walk right in and take over the entire building! This critical flaw in EyesOfNetwork (EON) allows attackers to escalate privileges by executing nmap as root, leading to unrestricted access to the server.

What to do

With this vulnerability, an attacker could gain total control over the server, allowing them to access sensitive data, alter configurations, or even bring the entire system down. It's absolutely devastating for organizations relying on EON for monitoring and managing their networks! Immediate action is necessary! Update EON to version 5.3.12 or later to patch this vulnerability. Additionally, review user permissions and ensure that sensitive commands are restricted to authorized accounts only. You've got this! Follow these steps, and you can safeguard your system from this threat! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.2th percentile
Published
2025-01-07T00:00Z
EPSS history
Timeline
  • 07 JAN 00:00Z
    An issue was discovered in EyesOfNetwork (EON) through 5.3.11
    cvelistv5