Intrusion PreventionIBM.Aspera.Faspex.CVE-2022-47986.Remote.Code.Execution
Description
This indicates an attack attempt to exploit a Remote Code Execution vulnerability in IBM Aspera Faspex.
This vulnerability is due to improper handling of user request. A remote attacker could exploit this vulnerability by sending a crafted message to the target system. Successfully exploiting this vulnerability could result in remote code execution.
Outbreak Alert
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Affected Products
IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://exchange.xforce.ibmcloud.com/vulnerabilities/243512
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52658 |
| Created | Feb 27, 2023 |
| Updated | Mar 22, 2023 |
| Outbreak Alert | IBM Aspera Faspex Code Execution |
| Risk |
|
| CVE ID | CVE-2022-47986 |
| Known Exploited | Yes |
| Exploit Prediction Score | 96.14% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |