ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-21810

PoC —
CVSS 3.1
7.8 high
EPSS
1%p67
Published
()
Modified
Description

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization.

Vendors
smartctl project
Products
smartctl
Weakness
CWE-78, CWE-77
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

No ingested article mentions this CVE yet.