CVE-2022-39057 — Changing Information Technology Inc. RAVA certificate validation system - Command Injection

CVE-2022-39057

Changing Information Technology Inc. RAVA certificate validation system - Command Injection PUBLISHED

Description (CNA)

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege can exploit this vulnerability to perform arbitrary system command and disrupt service.

Affected (CNA)

Vendor / product	Versions
Changing Information Technology Inc. / RAVA certificate validation system	affected 3

CWE

CWE-78

References

https://www.twcert.org.tw/tw/cp-132-6618-11fd8-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6618-11fd8-1.html

CISA-ADP

No English description supplied.

No references supplied.