CVE-2022-0073

HIGH EXPLOITED RANSOMWARE

OpenLiteSpeed 1.7.0-1.7.16 - Command Injection via Improper Input Validation

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2022-0073 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0 versions before 1.7.16.1.

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.0866
EPSS Percentile 94.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

VulnCheck KEV 2025-03-19
Ransomware Use Confirmed
CWE
CWE-20
Status published
Products (1)
litespeedtech/openlitespeed 1.7.0 - 1.7.16.1
Published Oct 27, 2022
Tracked Since Feb 18, 2026