ohnonoyesyes/CVE-2022-47986

PoC

Aspera Faspex Pre Auth RCE

view exploit source poc_in_githubauthor ohnonoyesyespublished 2023-02-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-47986US	critical9.8OT critical	100.0% (100th)	KEV	2023-02-17
IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a special…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.