Cisco Tetration Command Injection Vulnerability Advisory (CVE-2022-20652)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Tetration Command Injection Vulnerability - Vulnerability ID: cisco-sa-tetr-cmd-injc-skrwGO - CVE Number: CVE-2022-20652 - CWE Number: CWE-78 - Vulnerability Severity: Medium 2. Affected Products: - Affected Product: Cisco Tetration - Affected Versions: 3.5.1 and earlier versions 3. Exploitation: - Cause: Insufficient input validation - Attack Method: Submitting crafted HTTP messages to the affected system - Impact: Allows attackers to execute arbitrary commands with root privileges 4. Remediation: - Available Fix: Software update has been released - Workaround: No workaround available 5. Affected Software Versions: - Affected Versions: 3.5.1 and earlier - Unaffected Versions: 3.6 6. Source: - Discovery Method: Internal security testing 7. Related Links: - Security Advisory Link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tetr-cmd-injc-skrwGO 8. Revision History: - Revision Version: 1.1 - Revision Date: January 31, 2022 9. Disclaimer: - Disclaimer: This document is provided "AS IS" without any warranty or guarantee, including but not limited to merchantability or fitness for a particular purpose. Users assume all risks associated with using the information or materials linked to in this document. Cisco reserves the right to modify or update this document at any time. This information helps users understand the vulnerability details, affected products and versions, remediation steps, and how to obtain further information.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco Tetration Command Injection Vulnerability Advisory (CVE-2022-20652)