Vulnerabilities > Fidelissecurity > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-05-17 | CVE-2022-24388 | Command Injection vulnerability in Fidelissecurity Deception and Network Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. | 9.0 |
| 2022-05-17 | CVE-2022-24389 | Command Injection vulnerability in Fidelissecurity Deception and Network Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Sensor, and Sandbox components as well as neighboring Fidelis components. | 9.0 |
| 2022-05-17 | CVE-2022-24392 | Command Injection vulnerability in Fidelissecurity Deception and Network Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value for the “feed” parameter. | 9.0 |
| 2022-05-17 | CVE-2022-24393 | Command Injection vulnerability in Fidelissecurity Deception and Network Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp” parameter. | 9.0 |
| 2022-05-17 | CVE-2022-24394 | Command Injection vulnerability in Fidelissecurity Deception and Network Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” parameter. | 9.0 |
| 2021-06-25 | CVE-2021-35047 | OS Command Injection vulnerability in Fidelissecurity Deception and Network Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level commands into the component and neighboring Fidelis components. | 9.0 |