CVE-2022-46649 - AskarLabs CVE Database

CVE-2022-46649

Vendor N/A

Product ALEOS

Weakness CWE-78

Published February 10, 2023

Last update March 24, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.

Key dates

02Disclosure timeline

February 10, 2023 CVE published

March 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-46649

Related vulnerabilities

04Related CVE

CVE-2023-2522 Chengdu VEC40G Network Detection os command injection CVE-2023-28381 CVE-2024-43648 Authenticated command injection via <redacted>.exe <redacted> parameter CVE-2023-25617 OS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server) CVE-2022-20964