CVE-2022-28944

Certain EMCO Software products are affected by: CWE-494: Download of Code Without Integrity Check. This affects MSI Package Builder for Windows 9.1.4 and Remote Installer for Windows 6.0.13 and Ping Monitor for Windows 8.0.18 and Remote Shutdown for Windows 7.2.2 and WakeOnLan 2.0.8 and Network Inventory for Windows 5.8.22 and Network Software Scanner for Windows 2.0.8 and UnLock IT for Windows 6.1.1. The impact is: execute arbitrary code (remote). The component is: Updater. The attack vector is: To exploit this vulnerability, a user must trigger an update of an affected installation of EMCO Software. ¶¶ Multiple products from EMCO Software are affected by a remote code execution vulnerability during the update process.

• CWE-494

• https://github.com/gerr-re/cve-2022-28944/blob/main/cve-2022-28944_public-advisory.pdfExploit, Third Party Advisory
• https://github.com/gerr-re/cve-2022-28944/blob/main/cve-2022-28944_public-advisory.pdfExploit, Third Party Advisory

Published

May 23, 2022

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28932D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to cont…9.8
• CVE-2022-28935Totolink A830R V5.9c.4729_B20191112, Totolink A3100R V4.1.2c…7.2
• CVE-2022-28936FISCO-BCOS release-3.0.0-rc2 was discovered to contain an is…7.5
• CVE-2022-28937FISCO-BCOS release-3.0.0-rc2 was discovered to contain an is…7.5
• CVE-2022-2894Measuresoft ScadaPro Server (All Versions) uses unmaintained…7.8
• CVE-2022-28940In H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface …7.5
• CVE-2022-28945An issue in Webbank WeCube v3.2.2 allows attackers to execut…9.8
• CVE-2022-28946An issue in the component ast/parser.go of Open Policy Agent…7.5
• CVE-2022-28948An issue in the Unmarshal function in Go-Yaml v3 causes the …7.5
• CVE-2022-2895Measuresoft ScadaPro Server (All Versions) uses unmaintained…7.8
• CVE-2022-28955An access control issue in D-Link DIR816L_FW206b01 allows un…7.5
• CVE-2022-28956An issue in the getcfg.php component of D-Link DIR816L_FW206…9.8