cbcvebase.
CVE-2022-23347
published 2022-03-21

CVE-2022-23347: BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

PriorityP178high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
13.12%
95.9th percentile
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

Affected

1 ranges
VendorProductVersion rangeFixed in
bigantsoftbigant_server——

Detection & IOCsextracted from sources · hover to see the quote

url/index.php/Pan/ShareUrl/downloadSharedFile?true_path=../../../../../../windows/win.ini&file_name=win.ini↗
path/index.php/Pan/ShareUrl/downloadSharedFile↗
  • →HTTP GET request to the vulnerable endpoint with directory traversal sequence in 'true_path' parameter targeting win.ini ↗
  • →Response body contains Windows win.ini artifact strings indicating successful LFI exploitation ↗
  • →Shodan query to identify exposed BigAnt Server instances ↗
  • →FOFA query to identify exposed BigAnt Server instances ↗
  • ·Vulnerability affects BigAnt Server version 5.6.06 specifically; other versions may not be affected ↗
  • ·No authentication is required to exploit this vulnerability (PR:N, UI:N) ↗

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vulncheck7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.