How severe is CVE-2022-47531?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Ericsson Evolved Packet Gateway

CVE-2022-47531

An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell.

EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ericsson Evolved_packet_gateway
N/a — versions n/a

References

cve@mitre.org (Third Party Advisory)

Frequently asked questions

What is CVE-2022-47531?: CVE-2022-47531 is a high-severity vulnerability in Ericsson Evolved Packet Gateway. CVSS score: 8.8/10. Published 2023-12-05.
How severe is CVE-2022-47531?: High severity. CVSS v3 base score is 8.8 out of 10.