CVE-2022-27228 is a critical remote code execution vulnerability affecting Bitrix Site Manager versions prior to 21.0.100, specifically within its "Polls, Votes" module. This flaw allows an unauthenticated attacker to execute arbitrary code with no user interaction, earning a CVSS score of 9.8 (Critical) due to its complete compromise potential across confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, its high EPSS score and a reported surge in ICS attacks in Russia linked to Bitrix CMS exploitation suggest active targeting. Although no Metasploit or ExploitDB modules are publicly available, Nuclei templates exist, indicating exploit development and community awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 21.0.100CPE matchmatch criteria | cpe:2.3:a:bitrix24:bitrix24:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.