CVE-2022-47210

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

• CWE-78
• CWE-78

• https://www.tenable.com/security/research/tra-2022-37Exploit, Patch, Third Party Advisory
• https://www.tenable.com/security/research/tra-2022-37Exploit, Patch, Third Party Advisory

Published

Dec 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47196An insecure default vulnerability exists in the Post Creatio…5.4
• CVE-2022-47197An insecure default vulnerability exists in the Post Creatio…5.4
• CVE-2022-4720Open Redirect in GitHub repository ikus060/rdiffweb prior to…6.1
• CVE-2022-47208The “puhttpsniff” service, which runs by default, is suscept…8.8
• CVE-2022-47209A support user exists on the device and appears to be a back…8.8
• CVE-2022-4721Failure to Sanitize Special Elements into a Different Plane …5.4
• CVE-2022-47211Microsoft Office Graphics Remote Code Execution Vulnerabilit…7.8
• CVE-2022-47212Microsoft Office Graphics Remote Code Execution Vulnerabilit…7.8
• CVE-2022-47213Microsoft Office Graphics Remote Code Execution Vulnerabilit…7.8
• CVE-2022-4722Authentication Bypass by Primary Weakness in GitHub reposito…7.2
• CVE-2022-4723Allocation of Resources Without Limits or Throttling in GitH…6.5
• CVE-2022-4724Improper Access Control in GitHub repository ikus060/rdiffwe…9.8