Unrated severityNVD Advisory· Published Nov 22, 2022· Updated Apr 29, 2025

CVE-2022-40870

Description

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Parallels/Remote Application Serverdescription
Parallels/Remote Application Serverllm-create
Range: =18.0

Patches

Vulnerability mechanics

References

github.com/IthacaLabs/Parallels/blob/main/ParallelsRemoteApplicationServer/HHI_CVE-2022-40870.txtmitre
github.com/IthacaLabs/Parallels/tree/main/ParallelsRemoteApplicationServermitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000