CVE-2022-22945 is a CLI shell injection vulnerability affecting VMware NSX Edge, including products like VMware Cloud Foundation and NSX Data Center. An attacker with SSH access to an NSX-Edge appliance can execute arbitrary commands as root on the underlying operating system. This vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, leading to high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and lacking public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, suggesting awareness within the security landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.0, <= 3.11CPE matchmatch criteria | cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* | ||
< 6.4.13CPE matchmatch criteria | cpe:2.3:a:vmware:nsx_data_center:*:*:*:*:*:vsphere:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.