CVE-2022-27964

Description

Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

Affected Platforms

Weakness Type

CWE-428

References

• https://github.com/ycdxsb/Vuln/blob/main/NetSarang-CreateProcessW-Misuse-Binary-…
• https://www.netsarang.com/en/xmanager-update-history/
• https://github.com/ycdxsb/Vuln/blob/main/NetSarang-CreateProcessW-Misuse-Binary-…
• https://www.netsarang.com/en/xmanager-update-history/