CVE-2022-41572

critical · 9.8

An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The attacker achieves total control over the server.

9.8

CVSS

0.6%

EPSS (exploit prob.)

47th

EPSS percentile

2025-01-07

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-276

Affected products

Vendor	Product	Affected versions
eyesofnetwork	eyesofnetwork	<= 5.3-11

Check a specific version with /api/v1/cve/match.

References

https://github.com/EyesOfNetworkCommunity/eonweb/issues/120
https://github.com/Orange-Cyberdefense/CVE-repository/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-41572