CVE-2022-2333 PoC — Honeywell SoftMaster Uncontrolled Search Path Element

Source

https://github.com/shirouQwQ/CVE-2022-2333

Associated Vulnerability

Title:Honeywell SoftMaster Uncontrolled Search Path Element (CVE-2022-2333)
Description:If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.

Description

SXF VPN RCE

Readme

# CVE-2022-2333

搞了大半年，给大家康个好康的

sxf vpn 大家喜欢吗

我不太喜欢

搞了大半年，shell都弹了

弹完发现是老固件

M7.6.8里居然没了

算了算了

不是信不过你，是我们大家想开开眼界

在家憋了这么长时间了，我也想出门开开眼界

生气


https://user-images.githubusercontent.com/104356092/165071356-d4f44414-77dc-4295-a804-9773908df7be.mp4

![code](https://user-images.githubusercontent.com/104356092/165071403-60a38d1e-ad75-44a0-aa15-3ed091433f72.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!