Critical severity · published Jan 7, 2025
CVE-2022-41572
An issue was discovered in EyesOfNetwork (EON) through 5.3.11
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EY
Eyesofnetwork · Eyesofnetwork
through 5.3-11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-41572
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-41572
Issue Tracking
https://github.com/EyesOfNetworkCommunity/eonweb/issues/120
Third Party Advisory
https://github.com/Orange-Cyberdefense/CVE-repository/
More from Eyesofnetwork
9.8
CVE-2020-8657
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
7.8
CVE-2020-8655
EyesOfNetwork Improper Privilege Management Vulnerability
9.8
CVE-2022-41571
An issue was discovered in EyesOfNetwork (EON) through 5.3.11
9.8
CVE-2022-41570
An issue was discovered in EyesOfNetwork (EON) through 5.3.11
9.8
CVE-2021-40643
EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page