CVE-2022-47531

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Dec 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-475329.8FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.CVE-2022-47545.4The Easy Social Box / Page Plugin WordPress plugin through 4.1.2 does not validate and escape some of its shortcode attributes before outputCVE-2022-475428.8Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges.CVE-2022-475435.3An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects.CVE-2022-475449.8An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed.CVE-2022-475475.3GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score (and thus not be pruned from the network) even though itCVE-2022-475496.4An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allowCVE-2022-47556.1A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanagCVE-2022-475516.5Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issuCVE-2022-475537.5Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive information for the oCVE-2022-475547.5Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical information from variousCVE-2022-475558.8Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users
CVE-2022-47531: High severity, CVSS 8.8 | Vulnix