Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
14 Jan 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.fox-it.com/nl-en/fox-crypto/fox-datadiode/ - Product | |
| References | () https://www.fox-it.com/nl-en/software-vulnerability-report/ - Product |
07 Jun 2023, 15:10
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:h:fox-it:fox_datadiode:-:*:*:*:*:*:*:* cpe:2.3:o:fox-it:fox_datadiode_firmware:3.4.3:*:*:*:*:*:*:* |
|
| First Time |
Fox-it
Fox-it fox Datadiode Firmware Fox-it fox Datadiode |
|
| CWE | CWE-22 | |
| References | (MISC) https://www.fox-it.com/nl-en/software-vulnerability-report/ - Product | |
| References | (MISC) https://www.fox-it.com/nl-en/fox-crypto/fox-datadiode/ - Product |
31 May 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-31 00:15
Updated : 2025-01-14 17:15
NVD link : CVE-2022-47526
Mitre link : CVE-2022-47526
JSON object : View
Products Affected
fox-it
- fox_datadiode
- fox_datadiode_firmware
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')