CVE-2022-38130: SQL Injection
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38130?
CVE-2022-38130 has been rated as high severity due to its potential for remote code execution.
How do I fix CVE-2022-38130?
To mitigate CVE-2022-38130, it is recommended to upgrade to the patched version of Keysight Sensor Management Server.
What does CVE-2022-38130 exploit?
CVE-2022-38130 exploits the com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method to allow unauthenticated attackers to access the database.
Which software versions are affected by CVE-2022-38130?
CVE-2022-38130 specifically affects Keysight Sensor Management Server version 2.4.0.
Can CVE-2022-38130 be exploited remotely?
Yes, CVE-2022-38130 can be exploited remotely without authentication by an attacker.