Critical severity9.8NVD Advisory· Published May 2, 2022· Updated Jun 17, 2026

CVE-2022-28054

Description

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VanDyke Software/VShell for Windowsllm-create2 versions
= 4.6.2+ 1 more
- (no CPE)range: = 4.6.2
- (no CPE)
VanDyke Software/VShell
cpe:2.3:a:vandyke:vshell:*:*:*:*:*:*:*:*
Range: <4.6.3

Patches

Vulnerability mechanics

References

www.vandyke.com/support/advisory/2022/02/remote-execution-via-triggers.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.026
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000