CVE-2022-29806 Path traversal in n/a
Attackers can achieve remote code execution in ZoneMinder by exploiting a path traversal vulnerability in language handling to write debug logs to arbitrary locations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-29806?
CVE-2022-29806 is a critical path traversal vulnerability in Zoneminder Zoneminder, published on 26 Apr 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.
Weakness: CWE-22
Which versions are affected by CVE-2022-29806?
It affects 1 product.
Products include Zoneminder Zoneminder.
How do I fix CVE-2022-29806?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-29806 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-29806 exists.
Public exploit code: 1 Metasploit module and 1 proofs of concept on GitHub.
Other vulnerabilities in Zoneminder Zoneminder
Sources
Also known as DEBIAN-CVE-2022-29806, GHSA-xr7v-8xc4-62vc, UBUNTU-CVE-2022-29806.