CVE-2022-23650

CVE-2022-23650 is a critical vulnerability affecting Netmaker versions prior to 0.8.5, 0.9.4, and 0.10.0, stemming from a hard-coded cryptographic key. This flaw allows an authenticated attacker, knowing the admin's address and username, to execute arbitrary admin commands on the Netmaker server. With a CVSS score of 8.8 (HIGH), it presents a significant risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability compromise. There is currently no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it has not yet garnered widespread attention.