CVE-2022-37719
Published on: Not Yet Published
Last Modified on: 02/03/2023 05:24:00 PM UTC
Certain versions of Application Delivery Controller from Edgenexus contain the following vulnerability:
A Cross-Site Request Forgery (CSRF) in the management portal of JetNexus/EdgeNexus ADC 4.2.8 allows attackers to escalate privileges and execute arbitrary code via unspecified vectors.
- CVE-2022-37719 has been assigned by
[email protected] to track the vulnerability - currently rated as HIGH severity.
CVSS3 Score: 8.8 - HIGH
Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
---|---|---|---|
NETWORK | LOW | NONE | REQUIRED |
Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
UNCHANGED | HIGH | HIGH | HIGH |
CVE References
Description | Tags ⓘ | Link |
---|---|---|
Load Balancer – Edgenexus load balancers and Application Security | www.edgenexus.io text/html |
![]() |
Cryptnetix - JetNexus/EdgeNexus 4.2.8 Vulnerability Disclosure | www.cryptnetix.com text/html |
![]() |
There are currently no QIDs associated with this CVE
Known Affected Configurations (CPE V2.3)
Type | Vendor | Product | Version | Update | Edition | Language |
---|---|---|---|---|---|---|
Application | Edgenexus | Application Delivery Controller | 4.2.8 | All | All | All |
- cpe:2.3:a:edgenexus:application_delivery_controller:4.2.8:*:*:*:*:*:*:*:
No vendor comments have been submitted for this CVE
Social Mentions
Source | Title | Posted (UTC) |
---|---|---|
![]() |
Potentially Critical CVE Detected! CVE-2022-37719 A Cross-Site Request Forgery (CSRF) in the management portal of J… twitter.com/i/web/status/1… | 2023-01-23 16:56:00 |
![]() |
CVE-2022-37719 : A Cross-Site Request Forgery CSRF in the management portal of JetNexus/EdgeNexus ADC 4.2.8 allow… twitter.com/i/web/status/1… | 2023-01-23 17:06:55 |
![]() |
CVE-2022-37719 | 2023-01-23 17:39:09 |