CVE-2022-24388

Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

• CWE-78
• CWE-77

• https://fidelissecurity.zendesk.com/hc/en-us/articles/6211730139411Permissions Required, Vendor Advisory
• https://fidelissecurity.zendesk.com/hc/en-us/articles/6211730139411Permissions Required, Vendor Advisory

Published

May 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24382Improper input validation in firmware for some Intel(R) NUCs…6.7
• CVE-2022-24383The affected product is vulnerable to an out-of-bounds read,…7.8
• CVE-2022-24384Cross-site Scripting (XSS) vulnerability in SmarterTools Sma…6.1
• CVE-2022-24385A Direct Object Access vulnerability in SmarterTools Smarter…6.5
• CVE-2022-24386Stored XSS in SmarterTools SmarterTrack This issue affects: …6.1
• CVE-2022-24387With administrator or admin privileges the application can b…7.2
• CVE-2022-24389Vulnerability in rconfig “cert_utils” enables an attacker wi…8.8
• CVE-2022-2439The Easy Digital Downloads – Simple eCommerce for Selling Di…7.2
• CVE-2022-24390Vulnerability in rconfig “remote_text_file” enables an attac…8.8
• CVE-2022-24391Vulnerability in Fidelis Network and Deception CommandPost e…8.8
• CVE-2022-24392Vulnerability in Fidelis Network and Deception CommandPost e…8.8
• CVE-2022-24393Vulnerability in Fidelis Network and Deception CommandPost e…8.8