VulnerabilityhighExploited in the wild

Experts released VMware vRealize Log RCE exploit

Security Affairsby @securityaffairsJan 31, 2023 · 18:44 UTC (Jan 31, 2023)3 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-31706 CVE-2022-31704 CVE-2022-31710 CVE-2022-31711

Tags: cve-2022-31706 cve-2022-31704 cve-2022-31710 cve-2022-31711 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31706 +3 related CVEs CVE-2022-31704 CVE-2022-31710 CVE-2022-31711	The vRealize Log Insight contains a Directory Traversal Vulnerability	9.8 group max	87%		Jan 26, 2023

From the original article

3 min read at securityaffairs.com

Horizon3 security researchers released proof-of-concept (PoC) code for VMware vRealize Log Insight RCE vulnerability CVE-2022-31706. Last week, researchers from Horizon3’s Attack Team announced the release of PoC exploit code for remote code execution in VMware vRealize Log tracked as CVE-2022-31706 (CVSS base 9. 8/10).

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.