CVE-2022-34824: Critical severity nec expresscluster x vulnerability
Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-34824 vulnerability?
CVE-2022-34824 is a Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, and EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier, which allows a remote unauthenticated attacker to exploit weak file and folder permissions.
How severe is CVE-2022-34824 vulnerability?
CVE-2022-34824 vulnerability has a severity level of critical with a CVSS score of 9.8.
What software versions are affected by CVE-2022-34824 vulnerability?
CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, and EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier are affected by CVE-2022-34824 vulnerability.
How can an attacker exploit CVE-2022-34824 vulnerability?
An attacker can exploit CVE-2022-34824 vulnerability by taking advantage of weak file and folder permissions in the affected software, allowing them to execute unauthorized actions remotely.
Is there a fix available for CVE-2022-34824 vulnerability?
Yes, NEC has provided a fix to address the CVE-2022-34824 vulnerability. It is recommended to apply the latest security patch or upgrade to a patched version of the affected software.