CVE-2022-36784 — Elsight – Elsight Halo Remote Code Execution (RCE)

CVE-2022-36784

Elsight – Elsight Halo Remote Code Execution (RCE) PUBLISHED

Description (CNA)

Elsight – Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution.

Affected (CNA)

Vendor / product	Versions
Elsight / Elsight Halo	affected All versions before Update to version 10.6.1

CWE

No CWE identifiers supplied.

References

https://www.gov.il/en/Departments/faq/cve_advisories

ADP enrichment

CVE

No English description supplied.

https://www.gov.il/en/Departments/faq/cve_advisories

CISA-ADP

No English description supplied.

No references supplied.