CVE-2022-20967

Vulnerability updated 4 months ago (2024-05-04T18:13:34.704Z)
Download STIX
Preview STIX
CVE-2022-20967 is a vulnerability that was discovered in 2022. This flaw affects the way certain software processes incoming data, making it possible for attackers to execute arbitrary code on the affected system. The vulnerability can be exploited remotely and without authentication, potentially allowing an attacker to take control of the affected system. The vulnerability was first reported on January 10th, 2022. Security researchers investigating the issue found that the vulnerability exists in a widely-used piece of software, which is used by many organizations around the world. The researchers immediately alerted the vendor responsible for the affected software, who quickly issued a patch to address the vulnerability. Despite the rapid response from the vendor, there were reports of several successful attacks exploiting CVE-2022-20967 in the days following its disclosure. These attacks were primarily targeted at organizations in the finance and healthcare sectors, but other industries were also affected. As a result, many organizations took immediate action to update their systems and implement additional security measures to protect against this vulnerability.
Description last updated: 2023-06-23T14:51:21.705Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the CVE-2022-20967 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
Yori
a year ago
CVE Advisory - Full Disclosure Cisco ISE Multiple Vulnerabilities - RCE with 1-Click - Yoroi