CVE-2022-42496

EUVD-2022-7547
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Affected Products (NVD)
VendorProductVersion
kujirahandnadesiko3
𝑥
≤ 3.3.74
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/kujirahand/nadesiko3/issues/1325
https://github.com/kujirahand/nadesiko3/issues/1347
https://jvn.jp/en/jp/JVN56968681/index.html
https://github.com/kujirahand/nadesiko3/issues/1325
https://github.com/kujirahand/nadesiko3/issues/1347
https://jvn.jp/en/jp/JVN56968681/index.html