CVEvulnerability
CVE-2022-41572
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2025-01-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-276
Description
An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server.
Affected configurations
• eyesofnetwork eyesofnetwork (<= 5.3-11)
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://github.com/EyesOfNetworkCommunity/eonweb/issues/120 Issue Tracking
- https://github.com/Orange-Cyberdefense/CVE-repository/ Third Party Advisory