henryreed/CVE-2022-0997

PoC

Fidelis Network and Deception - Insecure File Permissions Privilege Escalation

view exploit source poc_in_githubauthor henryreedpublished 2022-06-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-0997US	high7.8OT elevated	0.52% (44th)	Exploit	2022-05-17
Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.