CRITICAL

CVE-2023-22855

CVSS v3

9.8

CRITICAL

EPSS Score

66.2%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code.

Technical details

Published
2/15/2023

Frequently asked questions

What is CVE-2023-22855?

Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution. It spawns a web interface listening on port 8088. A user-controllable path is handed to a path-concatenation method (Path.Combine from .NET) without proper sanitisation. This yields the possibility of including local files, as well as remote files on SMB shares. If one provides a file with the extension .t4, it is rendered with the .NET templating engine mono/t4, which can execute code.

Is CVE-2023-22855 actively exploited?

Active exploitation of CVE-2023-22855 has not been confirmed. The EPSS score is 66.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2023-22855?

CVE-2023-22855 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2023-22855 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.