CVE-2022-25356

MEDIUM NUCLEI

Alt-N MDaemon Security Gateway <8.5.0 - XML Injection

Title source: llm

CVE-2022-25356 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection

MEDIUMVERIFIEDby Akincibor

Core 4

Core References

Various Sources

Product x_refsource_misc

Product x_refsource_misc

Exploit, Patch, Third Party Advisory x_refsource_misc

CVSS v3 5.3

EPSS 0.0562

EPSS Percentile 91.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

CWE

CWE-91

Status published

Products (1)

altn/securitygateway 2.1.0 - 8.5.0

Published Apr 05, 2022

Tracked Since Feb 18, 2026