CVE-2022-29774
CRITICALiSpy 7.2.2.0 - Remote Command Execution via Path Traversal
Title source: llmDescription
iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.
References (3)
Core 3
Core References
Third Party Advisory x_refsource_misc
https://gist.github.com/securylight/79f673aa3a453c80c0e78f356a8f650b
Third Party Advisory x_refsource_misc
https://github.com/securylight/CVES_write_ups
Exploit x_refsource_misc
https://github.com/securylight/CVES_write_ups/blob/main/iSpy_connect.pdf
Scores
CVSS v3
9.8
EPSS
0.0540
EPSS Percentile
91.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-22
Status
published
Products (1)
ispyconnect/ispy
7.2.2.0
Published
Jun 21, 2022
Tracked Since
Feb 18, 2026