NetMan 204 Remote Code Execution
CVE-2022-47893

10CRITICAL

Key Information:

Vendor

Riello Ups

Status
Netman-204
Vendor
CVE Published:
3 October 2023

What is CVE-2022-47893?

A remote code execution vulnerability exists in the NetMan 204 by Riello UPS, impacting all versions. This flaw allows an attacker to upload a specially crafted firmware file, which may contain a webshell. If exploited, this vulnerability could enable unauthorized execution of arbitrary code with root privileges, potentially leading to full control over the affected system.

Affected Version(s)

Netman-204 0

References

https://www.incibe.es/incibe-cert/alerta-temprana/avisos-...

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Joel Gámez Molina (@JoelGMSec)
JSON
.
CVE-2022-47893 : NetMan 204 Remote Code Execution