CVE-2022-28684: DevExpress SafeBinaryFormatter Deserialization of Untrusted Data Remote Code Execution Vulnerability

Q: What is the severity of CVE-2022-28684?

CVE-2022-28684 is a critical vulnerability that allows remote code execution on affected DevExpress installations.

Q: How do I fix CVE-2022-28684?

To fix CVE-2022-28684, upgrade to the latest version of DevExpress that addresses this vulnerability.

Q: What products are affected by CVE-2022-28684?

CVE-2022-28684 affects multiple versions of DevExpress from 18.1.0 to 22.1.0.

Q: Who can exploit CVE-2022-28684?

CVE-2022-28684 can be exploited by remote attackers, but authentication is required for the exploit.

Q: What is the cause of CVE-2022-28684?

CVE-2022-28684 results from a flaw in the SafeBinaryFormatter library due to the lack of proper validation.

Published Aug 3, 2022

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of DevExpress. Authentication is required to exploit this vulnerability. The specific flaw exists within the SafeBinaryFormatter library. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account.

Affected Software

10 affected components

DevExpress DevExpress

DevExpress DevExpress>=18.1.0<18.1.18

DevExpress DevExpress>=18.2.0<18.2.17

DevExpress DevExpress>=19.1.0<19.1.15

DevExpress DevExpress>=19.2.0<19.2.14

DevExpress DevExpress>=20.1.0<20.1.15

DevExpress DevExpress>=20.2.0<20.2.11

DevExpress DevExpress>=21.1.0<21.1.9

DevExpress DevExpress>=21.2.0<21.2.7

DevExpress DevExpress=22.1.0

Event History

Aug 3, 2022

CVE Published

via MITRE·03:20 PM

Data Sourced

via MITRE·03:20 PM

DescriptionSeverityWeakness

Feb 25, 2025

Advisory Published

via ZDI·02:22 PM

Frequently Asked Questions

What is the severity of CVE-2022-28684?

CVE-2022-28684 is a critical vulnerability that allows remote code execution on affected DevExpress installations.

How do I fix CVE-2022-28684?

To fix CVE-2022-28684, upgrade to the latest version of DevExpress that addresses this vulnerability.

What products are affected by CVE-2022-28684?

CVE-2022-28684 affects multiple versions of DevExpress from 18.1.0 to 22.1.0.

Who can exploit CVE-2022-28684?

CVE-2022-28684 can be exploited by remote attackers, but authentication is required for the exploit.

What is the cause of CVE-2022-28684?