← All advisories

Medium severity6.5NVD Advisory· Published Mar 31, 2022· Updated Jun 17, 2026

CVE-2022-27964

CVE-2022-27964

Description

Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.

Affected products

3

Netsarang/Xmanager2 versions
cpe:2.3:a:netsarang:xmanager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:netsarang:xmanager:*:*:*:*:*:*:*:*range: <=7.0.0096
- (no CPE)range: <=7.0.0096
Xmanager/Xmanagerdescription

Patches

Vulnerability mechanics

References

2

github.com/ycdxsb/Vuln/blob/main/NetSarang-CreateProcessW-Misuse-Binary-Hijack/Xmanager-CreateProcessW-Misuse-Binary-HijacknvdExploitThird Party Advisory
www.netsarang.com/en/xmanager-update-history/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.