CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
First published: Fri Mar 24 2023(Updated: )
Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HelpSystems Cobalt Strike | =4.7.1 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://thesecmaster.com/how-to-fix-cve-2022-42948-a-critical-rce-vulnerability-in-cobalt-strike/
- https://www.cobaltstrike.com/blog/
- https://www.redpacketsecurity.com/helpsystems-cobalt-strike-code-execution-cve-2022-42948/
- https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/;
- https://nvd.nist.gov/vuln/detail/CVE-2022-42948
Frequently Asked Questions
What is CVE-2022-42948?
CVE-2022-42948 is a vulnerability in Fortra Cobalt Strike User Interface that allows remote code execution.
What is the affected software for CVE-2022-42948?
The affected software for CVE-2022-42948 is Fortra Cobalt Strike.
How does the vulnerability in CVE-2022-42948 occur?
The vulnerability in CVE-2022-42948 is rooted in Java Swing within the Fortra Cobalt Strike User Interface.
What is the severity of CVE-2022-42948?
The severity of CVE-2022-42948 is not specified.
Is there a fix for CVE-2022-42948?
Yes, a fix for CVE-2022-42948 is available in the latest update of Fortra Cobalt Strike (version 4.7.2).
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/description
- agent/title
- agent/author
- agent/weakness
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/helpsystems
- canonical/helpsystems cobalt strike
- version/helpsystems cobalt strike/4.7.1
- vendor/fortra
- canonical/fortra cobalt strike