Vulnerability Description
Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary secId and plandetailid field values. Successful exploitation results in remote code execution under the privileges of the application server process. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14 (UTC).
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://ch0x01e.github.io/post/ecology9-wen-jian-shang-chuan-fen-xi/
- https://cn-sec.com/archives/1208148.html
- https://github.com/gmh5225/CVE-2022-HW-POC/blob/main/%E6%B3%9B%E5%BE%AEOA%20uplo
- https://www.vulncheck.com/advisories/weaver-e-cology-file-upload-rce-via-uploade
- https://www.weaver.com.cn/cs/ecology_full_log_en.html
- https://www.weaver.com.cn/cs/securityDownload.html#
FAQ
What is CVE-2022-4995?
CVE-2022-4995 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submittin...
How severe is CVE-2022-4995?
CVE-2022-4995 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-4995?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.