Rewterz Threat Alert – APT29 aka Nobelium – Active IOCs
February 18, 2022Rewterz Threat Advisory – Multiple Palo Alto Networks Vulnerabilities
February 18, 2022Rewterz Threat Alert – APT29 aka Nobelium – Active IOCs
February 18, 2022Rewterz Threat Advisory – Multiple Palo Alto Networks Vulnerabilities
February 18, 2022Severity
High
Analysis Summary
CVE-2022-22945
VMware NSX Data Center for vSphere could allow a local authenticated attacker to execute arbitrary code on the system, caused by a CLI shell injection vulnerability in the NSX Edge appliance component. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators of Compromise
CVE
- CVE-2022-22945
Affected Vendors
VMware
Affected Products
- VMware NSX Data Center for vSphere
Remediation
Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.