CVE-2022-40337

EUVD-2022-43628
OASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
aspiresoftwareopen_aviation_strategic_engineering_system
8.8.0.2
𝑥
= Vulnerable software versions
References
https://gist.github.com/Delson704557/df06fcee0b2676d611aef799e1c4a0e6
https://oases.aero/
https://www.aspiresoftware.com/companies/oases/
https://gist.github.com/Delson704557/df06fcee0b2676d611aef799e1c4a0e6
https://oases.aero/
https://www.aspiresoftware.com/companies/oases/