CVE-2022-23334
Critical
Description
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Ip-label Newtest
PublishedJan 30, 2023
First seenJan 30, 2023
Weakness typeCWE-347CWE-347
How to fix
Update
- ip-label newtest8.5r0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ip-label newtest | v < 8.5r0 | 8.5r0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.