CVE-2022-47531: High severity ericsson evolved packet gateway vulnerability
An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47531?
CVE-2022-47531 has a high severity rating, as it allows authenticated users to bypass security controls and execute commands directly on the Unix shell.
How do I fix CVE-2022-47531?
To mitigate CVE-2022-47531, upgrade the Ericsson Evolved Packet Gateway to version 2.16 or later for 2.x versions, and version 3.25 or later for 3.x versions.
Who is affected by CVE-2022-47531?
Organizations using Ericsson Evolved Packet Gateway versions prior to 2.16 and 3.25 are affected by CVE-2022-47531.
What type of vulnerability is CVE-2022-47531?
CVE-2022-47531 is a command injection vulnerability that allows unauthorized access to the Unix shell.
Can CVE-2022-47531 be exploited remotely?
CVE-2022-47531 requires authenticated access, thus the exploitation is limited to users with credentials on the system.