CVE-2022-42496: OS Command Injection
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-42496?
CVE-2022-42496 is an OS command injection vulnerability in the Nako3edit editor component of nadesiko3 (PC Version) v3.3.74 and earlier.
What is the severity of CVE-2022-42496?
CVE-2022-42496 has a severity rating of 9.8 (Critical).
Which software versions are affected by CVE-2022-42496?
CVE-2022-42496 affects Nadesiko3 (PC Version) v3.3.74 and earlier.
How can a remote attacker exploit CVE-2022-42496?
A remote attacker can exploit CVE-2022-42496 to obtain the appkey of the product and execute arbitrary OS commands.
Are there any references for CVE-2022-42496?
Yes, you can refer to the following links for more information: [Reference 1](https://github.com/kujirahand/nadesiko3/issues/1325), [Reference 2](https://github.com/kujirahand/nadesiko3/issues/1347), [Reference 3](https://jvn.jp/en/jp/JVN56968681/index.html)