CVE-2022-24562: Critical severity IObit IOTransfer vulnerability
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which can result in data theft and remote code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24562?
The severity of CVE-2022-24562 is critical with a CVSS score of 9.8.
What is the affected software of CVE-2022-24562?
IOBit IOTransfer version 4.3.1.1561 is affected by CVE-2022-24562.
What can an unauthenticated attacker do with CVE-2022-24562?
An unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file system with admin privileges on the victim's endpoint, which can result in data theft and remote code execution.
Are there any references for CVE-2022-24562?
Yes, you can find more information about CVE-2022-24562 at the following references: http://iobit.com, http://iotransfer.com, and http://packetstormsecurity.com/files/167775/IOTransfer-4.0-Remote-Code-Execution.html.
What is the CWE of CVE-2022-24562?
The CWE of CVE-2022-24562 is CWE-306.