WEB VanDyke VShell Server Trigger Command Injection (CVE-2022-28054)

Rule ID

1231299

Severity

Critical

Description

A command injection vulnerability has been reported in VanDyke VShell Server. The vulnerability is caused by insufficient sanitization of input passed to trigger action commands.

Impact

Remote command execution

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A