CVE-2022-1373
Published: 17 August 2022
Summary
CVE-2022-1373 is a high-severity Relative Path Traversal (CWE-23) vulnerability in Softing Edgeaggregator. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 1.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The vulnerability CVE-2022-1373 is a directory traversal flaw in the restore configuration feature of Softing Secure Integration Server V1.22. When the component processes an uploaded zip file, an attacker can supply path traversal sequences that cause an arbitrary DLL to be written to disk and subsequently executed. The issue is classified under CWE-22 and CWE-23 and is rated 7.2 on CVSS 3.1 with network attack vector and high impact on confidentiality, integrity, and availability.
An authenticated user holding administrative privileges can exploit the weakness by crafting and uploading a malicious zip archive via the restore configuration interface. Upon extraction the supplied DLL is placed in a location where it is loaded and run, granting the attacker arbitrary code execution on the server.
Vendor advisory SYT-2022-5 and the corresponding CISA advisory ICSA-22-228-04 describe the affected product and direct administrators to the available mitigations and updated software. The reported EPSS score of 0.6858 has remained at its observed peak since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-24693
Vulnerability details
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration"…
more
feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.