CVE-2022-3090 Path traversal in Crimson 3.0
Path traversal in Red Lion Crimson allows attackers to send user password hashes to arbitrary hosts, leading to credential disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-3090?
CVE-2022-3090 is a high-severity path traversal vulnerability in Red Lion Controls Crimson 3.0, published on 17 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.
Weakness: CWE-22
Which versions are affected by CVE-2022-3090?
It affects 1 product.
Products include Redlion Crimson.
How do I fix CVE-2022-3090?
No fix has been published for CVE-2022-3090 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-3090 being exploited?
There is no known exploitation of CVE-2022-3090 in the wild and no public exploit code.
Other vulnerabilities in Red Lion Controls Crimson 3.0
- CVE-2023-5719 Red Lion Crimson Improper Neutralization of Null Byte or NUL Character
- CVE-2019-10984 Memory corruption in Red Lion Controls Crimson (Windows configuration software)
- CVE-2019-10996 Use after free in Red Lion Controls Crimson (Windows configuration software)
- CVE-2020-27279 A NULL pointer deference vulnerability has been identified in the protocol converter.
- CVE-2020-27285 The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication.
Sources
Also known as GHSA-vv26-mr89-rpfc.