Vulnerability Details CVE-2022-28054
Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2022-28054
-
cpe:2.3:a:vandyke:vshell:-
-
cpe:2.3:a:vandyke:vshell:3.5.0.0
-
cpe:2.3:a:vandyke:vshell:4.6.2
-
cpe:2.3:o:microsoft:windows:-