Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-34824


Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrite existing files on the file system and to potentially execute arbitrary code.


Published

2022-11-08T22:15:14.353

Last Modified

2025-05-01T19:15:52.263

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-276
  • Type: Secondary
    CWE-276

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nec expresscluster_x ≤ 5.0 Yes
Application nec expresscluster_x_singleserversafe ≤ 5.0 Yes

References