CVE-2022-35503
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Open Source MANO（OSM）是Open Source MANO公司的一个用于管理和协调未来网络的开源软件。 Open Source MANO v7版本至v12版本存在安全漏洞，该漏洞源于对用户的输入验证不正确。
Possible ATT&CK Techniques 3 AI
T1078 · Valid Accounts T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-35503
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descriptor. An attacker may be able execute code to change the normal execution of the OSM components, retrieve confidential information, or gain access other parts of a Telco Operator infrastructure other than OSM itself.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Open Source MANO 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open Source MANO（OSM）是Open Source MANO公司的一个用于管理和协调未来网络的开源软件。 Open Source MANO v7版本至v12版本存在安全漏洞，该漏洞源于对用户的输入验证不正确。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2022-35503
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-35503
请登录查看更多情报信息。
Security Blog Posts for CVE-2022-35503 (1)
Other References for CVE-2022-35503 (2)
Same Patch Batch · n/a · 2024-04-22 · 44 CVEs total
| CVE-2023-38299 | 多款产品 安全漏洞 | |
| CVE-2023-38302 | flask-cors 安全漏洞 | |
| CVE-2023-38290 | com.evenwell.fqc 安全漏洞 | |
| CVE-2023-38296 | TCL 安全漏洞 | |
| CVE-2023-38295 | Tcl 安全漏洞 | |
| CVE-2023-38294 | Itel Vision 3 Turbo 安全漏洞 | |
| CVE-2023-38291 | TCL 20XE和TCL 10L 安全漏洞 | |
| CVE-2023-38292 | TCL 20XE 安全漏洞 | |
| CVE-2023-38298 | TCL 安全漏洞 | |
| CVE-2023-38293 | Nokia C100 安全漏洞 | |
| CVE-2023-38300 | Verizon Orbic Maui 安全漏洞 | |
| CVE-2023-38301 | vendor.gsm.serial 安全漏洞 | |
| CVE-2022-34561 | phpFox 跨站脚本漏洞 | |
| CVE-2022-34560 | phpFox 安全漏洞 | |
| CVE-2022-34562 | phpFox 跨站脚本漏洞 | |
| CVE-2022-46897 | 编号已被CVE保留 | |
| CVE-2024-27574 | Trainme Academy 安全漏洞 | |
| CVE-2024-29661 | Desdev DedeCMS 安全漏洞 | |
| CVE-2024-29368 | moziloCMS 安全漏洞 | |
| CVE-2024-29376 | Sylius 安全漏洞 |
Showing top 20 of 44 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-107350
Authentication bypass via second StartupMessage during SCRAM -
CVE-2026-107349
Infinite loop on empty option name in startup options parame -
CVE-2026-107348
Integer overflow causes an infinite loop in message buffer g -
CVE-2026-109828
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse unin -
CVE-2026-109827
GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write
V. Comments for CVE-2022-35503
No comments yet