CVE-2023-37292

published 2023-07-21

CVE-2023-37292: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga…

Priority P2 64 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock 5.5: before iSherlock-user-5.5-174.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
hgiga	isherlock	>= 4.5 < 4.5-174	4.5-174
hgiga	isherlock	>= 5.5 < 5.5-174	5.5-174
hgiga	isherlock_4.5	>= < iSherlock-user-4.5-174	iSherlock-user-4.5-174
hgiga	isherlock_5.5	>= < iSherlock-user-5.5-174	iSherlock-user-5.5-174

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78