Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-36784

Elsight – Elsight Halo Remote Code Execution (RCE)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

Elsight – Elsight Halo  Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elsight Elsight Halo

Default version status: unaffected

  • All versions to < Update to version 10.6.1affected

References