CVE-2022-31706

Deeper analysis

The vRealize Log Insight appliance is affected by a directory traversal vulnerability tracked as CVE-2022-31706. The flaw, assigned CWE-22, permits an unauthenticated remote actor to inject arbitrary files onto the underlying operating system, which can be leveraged for remote code execution. It carries a CVSS 3.1 base score of 9.8 reflecting network-accessible attack complexity with no required credentials or user interaction.

An attacker can send specially crafted requests to the affected appliance to write malicious files and subsequently execute code, resulting in full compromise of the system confidentiality, integrity, and availability. The vulnerability is exploitable over the network without authentication, enabling any remote adversary to achieve these outcomes.

VMware’s advisory VMSA-2023-0001 addresses the issue and provides remediation guidance for impacted versions of vRealize Log Insight. Public exploit code demonstrating unauthenticated remote code execution has been published, and the CVE maintains an EPSS score of 0.9018, indicating sustained exploitation interest since disclosure.