CVE-2022-47893 NetMan 204 Remote Code Execution

Critical 10.0 Published 3 Oct 2023 Updated 23 Sep 2024

Remote attackers can upload a malicious firmware file containing a webshell to execute arbitrary code with root privileges on NetMan 204 devices.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-47893?

CVE-2022-47893 is a critical vulnerability in Riello UPS Netman-204, published on 3 Oct 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.

Weakness: CWE-434

Which versions are affected by CVE-2022-47893?

It affects 1 product.

Products include Riello-Ups Netman 204 Firmware.

How do I fix CVE-2022-47893?

No fix has been published for CVE-2022-47893 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-47893 being exploited?

There is no known exploitation of CVE-2022-47893 in the wild and no public exploit code.

Sources

Also known as GHSA-xp8c-vfh9-64v5.