| |
Vulnerability CVE-2022-22995
Published: 2022-03-25 Modified: 2022-03-26
| Description: |
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code. |
Type:
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
7.5/10 |
6.4/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Partial |
References: |
https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
