CVE-2022-30547: Path Traversal

Published Aug 22, 2022

Updated

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

Affected Software

1 affected component

WWBN AVideo=11.6

Event History

Aug 22, 2022

CVE Published

via MITRE·06:24 PM

Data Sourced

via MITRE·06:24 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-30547?

CVE-2022-30547 is classified as a critical vulnerability due to its potential for arbitrary command execution.

How do I fix CVE-2022-30547?

To fix CVE-2022-30547, upgrade to the latest version of WWBN AVideo beyond 11.6 where the vulnerability is patched.

What types of attacks can exploit CVE-2022-30547?

CVE-2022-30547 can be exploited through specially-crafted HTTP requests that leverage directory traversal.

What software is affected by CVE-2022-30547?

CVE-2022-30547 specifically affects WWBN AVideo version 11.6.

Can CVE-2022-30547 lead to data compromise?

Yes, CVE-2022-30547 can potentially lead to unauthorized access and compromise of system commands.