SOCET GXP Vulnerability Advisory: XXE, RCE, Path Traversal, CSRF (CVE-2022-34977-34980)

Critical Vulnerability Information 1. XXE in SOCET GXP File Processing CVE: CVE-2022-34977 Affected Versions: SOCET GXP v4.6.0.3 and earlier Description: Attackers can exploit an XXE vulnerability in SOCET GXP file processing by submitting specially crafted XML input to access arbitrary files on the SOCET GXP host. Mitigation: Upgrade to SOCET GXP v4.6.0.4 or later. If upgrading is not possible, disable network access to the SOCET GXP Job Service. 2. Reflected Cross-Site Scripting in GXP Job Service CVE: CVE-2022-34985 Affected Versions: SOCET GXP v4.6.0.3 and earlier Description: Attackers can trigger a reflected XSS attack by sending specially crafted HTTP requests to the SOCET GXP Job Service. Mitigation: Upgrade to SOCET GXP v4.6.0.4 or later. If upgrading is not possible, disable network access to the SOCET GXP Job Service. 3. Command Injection in SOCET GXP Job Service CVE: CVE-2022-34984 Affected Versions: SOCET GXP v4.6.0.3 and earlier Description: Attackers can inject commands by sending specially crafted HTTP requests to the SOCET GXP Job Service. Mitigation: Upgrade to SOCET GXP v4.6.0.4 or later. If upgrading is not possible, disable network access to the SOCET GXP Job Service. 4. Path Traversal may allow malicious file read in SOCET GXP Job Service CVE: CVE-2022-34983 Affected Versions: SOCET GXP v4.6.0.3 and earlier Description: Attackers may exploit a path traversal vulnerability to read arbitrary files on the SOCET GXP Job Service. Mitigation: Upgrade to SOCET GXP v4.6.0.4 or later. If upgrading is not possible, disable network access to the SOCET GXP Job Service. 5. Unauthenticated access to the GXP Job Service on Port 41100 CVE: CVE-2022-34982 Affected Versions: SOCET GXP v4.6.0.3 and earlier Description: Attackers can access the GXP Job Service running on port 41100 without authentication. Mitigation: Upgrade to SOCET GXP v4.6.0.4 or later. If upgrading is not possible, disable network access to the SOCET GXP Job Service. 6. Client-Side Request Forgery in the GXP Job Status Service CVE: CVE-2022-34981 Affected Versions: SOCET GXP v4.6.0.3 and earlier Description: Attackers can exploit a CSRF vulnerability to perform arbitrary actions within a user’s browser. Mitigation: Upgrade to SOCET GXP v4.6.0.4 or later. If upgrading is not possible, disable network access to the SOCET GXP Job Status Service. 7. Information Disclosure in the GXP Job Status Service CVE: CVE-2022-34980 Affected Versions: SOCET GXP v4.6.0.3 and earlier Description: Attackers can retrieve system configuration information via the SOCET GXP Job Status Service. Mitigation: Upgrade to SOCET GXP v4.6.0.4 or later. If upgrading is not possible, disable network access to the SOCET GXP Job Status Service.

Goal Reached Thanks to every supporter — we hit 100%!

SOCET GXP Vulnerability Advisory: XXE, RCE, Path Traversal, CSRF (CVE-2022-34977-34980)