CVE-2022-46387

CRITICAL

9.8

Description

ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/28/2023

Derniere modification2/19/2025

Sourcenvd

Observations honeypot0

Produits affectes

cmder:cmdermaximus5:conemu

Faiblesses (CWE)

CWE-116

References

https://gist.github.com/dgl/05ca60cdc7efc9e47bbc58d0c952635e(cve@mitre.org)

https://github.com/cmderdev/cmder/blob/master/CHANGELOG.md(cve@mitre.org)

https://gist.github.com/dgl/05ca60cdc7efc9e47bbc58d0c952635e(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/cmderdev/cmder/blob/master/CHANGELOG.md(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.