Vulnerability Details CVE-2022-44000
An issue was discovered in BACKCLICK Professional 5.9.63. Due to an exposed internal communications interface, it is possible to execute arbitrary system commands on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 56.7%
CVSS Severity
CVSS v3 Score 9.8
References
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-032.txt
- https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-032.txt
- https://www.syss.de/pentest-blog/vielfaeltige-schwachstellen-in-backclick-professional-syss-2022-026-bis-037