9.8 - CVE-2022-46387

Executive Summary

Informations
Name	CVE-2022-46387	First vendor Publication	2023-03-28
Vendor	Cve	Last vendor Modification	2025-02-19

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score	9.8
Base Score	9.8	Environmental Score	9.8
impact SubScore	5.9	Temporal Score	9.8
Exploitabality Sub Score	3.9

Attack Vector	Network	Attack Complexity	Low
Privileges Required	None	User Interaction	None
Scope	Unchanged	Confidentiality Impact	High
Integrity Impact	High	Availability Impact	High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score	N/A	Attack Range	N/A
Cvss Impact Score	N/A	Attack Complexity	N/A
Cvss Expoit Score	N/A	Authentication	N/A
Calculate full CVSS 2.0 Vectors scores

Detail

ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to change the title and then execute it as commands.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46387

CPE : Common Platform Enumeration

Type	Description	Count
Application	Cmder cpe:2.3:a:cmder:cmder::::::::	1
Application	maximus5 Conemu cpe:2.3:a:maximus5:conemu::::::::	1

Sources (Detail)

https://gist.github.com/dgl/05ca60cdc7efc9e47bbc58d0c952635e
https://github.com/cmderdev/cmder/blob/master/CHANGELOG.md

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2025-02-20 00:21:10	Multiple Updates
2024-11-28 14:17:37	Multiple Updates
2023-10-05 21:27:44	Multiple Updates
2023-10-03 21:27:36	Multiple Updates
2023-09-15 02:24:19	Multiple Updates
2023-04-05 09:27:20	Multiple Updates
2023-03-29 13:27:29	Multiple Updates
2023-03-29 00:27:17	First insertion