CVE-2022-23334
CRITICALCVSS 9.8/10EPSS 0.53%
Last modified
CVE-2022-23334 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.. EPSS estimates a 0.53% chance of exploitation in the next 30 days.
Description
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ip-Label | Newtest | < 8.5r0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-23334?
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
How severe is CVE-2022-23334?
CVE-2022-23334 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.53% probability of exploitation in the next 30 days.
How do I fix CVE-2022-23334?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-23328A design flaw in all versions of Go-Ethereum allows an attac…7.5
- CVE-2022-23329A vulnerability in ${"freemarker.template.utility.Execute"?n…9.8
- CVE-2022-2333If an attacker manages to trick a valid user into loading a …7.8
- CVE-2022-23330A remote code execution (RCE) vulnerability in HelloWorldAdd…8.8
- CVE-2022-23331In DataEase v1.6.1, an authenticated user can gain unauthori…8.8
- CVE-2022-23332Command injection vulnerability in Manual Ping Form (Web UI)…8.8
- CVE-2022-23335Metinfo v7.5.0 was discovered to contain a SQL injection vul…9.8
- CVE-2022-23336S-CMS v5.0 was discovered to contain a SQL injection vulnera…9.8
- CVE-2022-23337DedeCMS v5.7.87 was discovered to contain a SQL injection vu…9.8
- CVE-2022-2334The application searches for a library dll that is not found…7.2
- CVE-2022-23340Joplin 2.6.10 allows remote attackers to execute system comm…9.8
- CVE-2022-23342The Hyland Onbase Application Server releases prior to 20.3.…5.3
Are you affected by CVE-2022-23334?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST