CVE-2022-37108

HIGH

Securonix Snypr 6.4 - Authenticated Remote Code Execution via Syslog-ng Configuration Wizard

Title source: llm
STIX 2.1

Description

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab files. The patch for this was present in SNYPR version 6.4 Jun 2022 R3_[06170871], but may have been introduced sooner.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://conway.scot/securonix-rce/

Scores

CVSS v3 8.7
EPSS 0.0097
EPSS Percentile 57.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

Details

CWE
CWE-74
Status published
Products (1)
securonix/snypr 6.4
Published Sep 07, 2022
Tracked Since Feb 18, 2026