CVE-2022-41642: OS Command Injection
Published Dec 5, 2022
·Updated
OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.
Affected Software
1 affected component
Kujirahand Nadesiko3<=3.3.68
Remediation
Patch Available
Patch Available
Event History
Dec 5, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2022-41642?
CVE-2022-41642 is an OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier.
2
How can a remote attacker exploit CVE-2022-41642?
A remote attacker can exploit CVE-2022-41642 by executing an arbitrary OS command when processing compression and decompression on the product.
3
Which software versions are affected by CVE-2022-41642?
CVE-2022-41642 affects Nadesiko3 (PC Version) v3.3.61 up to v3.3.68.
4
What is the severity level of CVE-2022-41642?
CVE-2022-41642 has a severity level of critical.
5
Is there a fix available for CVE-2022-41642?
There is no specific fix available for CVE-2022-41642 at the moment, but it is recommended to update to the latest version of Nadesiko3 as soon as it becomes available.