CVEvulnerability

CVE-2022-23764

9.8 CRITICAL Published 2022-08-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-346

Description

The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update. Remote attackers can bypass this verification logic to update both digitally signed and unauthorized files, enabling remote code execution.

Affected configurations

• teruten webcube (>= 1.0.5.5 < 1.2.0.0)

Related

Weakness · CWE (1)

  • CWE-346 Origin Validation Error weakness

References