CVE-2022-47071

In NVS365 V01, the background network test function can trigger command execution

Critical · published February 6, 2023

CVSS v3.1
9.8
EPSS
43%
Percentile
98.7
In the wild
Unconfirmed
What it is

🔥 One wrongly triggered network test can lead to full command execution! With NVS365 V01, just a background check can open the door to chaos. ⚡ Think of it like a seemingly harmless alarm system that, when tested, accidentally activates the security guard to let intruders in instead of keeping them out. This vulnerability lets attackers use the network test function to execute their own commands—as if they found a loophole in a well-guarded fortress! An attacker could exploit this flaw to run any command they desire on the affected system, potentially leading to unauthorized access, data breaches, or even taking complete control of the network. This scenario could lead to catastrophic consequences for your organization, making it an urgent priority to resolve!

Put simply

Think of it like a seemingly harmless alarm system that, when tested, accidentally activates the security guard to let intruders in instead of keeping them out. This vulnerability lets attackers use the network test function to execute their own commands—as if they found a loophole in a well-guarded fortress! This critical vulnerability in NVS365 V01 allows for remote command execution through the background network test function, which can be triggered by an attacker to execute arbitrary commands on the server.

What to do

An attacker could exploit this flaw to run any command they desire on the affected system, potentially leading to unauthorized access, data breaches, or even taking complete control of the network. This scenario could lead to catastrophic consequences for your organization, making it an urgent priority to resolve! To remediate this vulnerability, immediately patch NVS365 to the latest version provided by the vendor. Additionally, review your network test configurations to ensure they can't be exploited in this manner. It’s vital to restrict access to trusted users only! You've got this—act fast, and you’ll turn this potential disaster into a solid victory for your security! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.43135 · 98.7th percentile
Published
2023-02-06T00:00Z
EPSS history
Timeline
  • 21 OCT 03:17Z
    EPSS moved 26% → 43%
    epss
  • 06 FEB 00:00Z
    In NVS365 V01, the background network test function can trigger command execution
    cvelistv5