Back to CVE Browser

CVE-2022-42948

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-03-24

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.

Affected Platforms (CPE)

📦

Helpsystems

Cobalt Strike

= 4.7.1

References & Advisories

🔗 https://thesecmaster.com/how-to-fix-cve-2022-42948-a-critical-rce-vulnerability-in-cobalt-strike/

🔗 https://www.cobaltstrike.com/blog/

🔗 https://www.redpacketsecurity.com/helpsystems-cobalt-strike-code-execution-cve-2022-42948/

🔗 https://thesecmaster.com/how-to-fix-cve-2022-42948-a-critical-rce-vulnerability-in-cobalt-strike/

🔗 https://www.cobaltstrike.com/blog/

🔗 https://www.redpacketsecurity.com/helpsystems-cobalt-strike-code-execution-cve-2022-42948/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42948

Related Vulnerabilities

CVE-2018-253458.4

10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypas...

CVE-2018-253448.4

10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field...

CVE-2018-252558.6

10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers...

CVE-2020-371428.4

10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attack...