Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CVE-2022-37005
Summary
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- LOW
- NETWORK
- NONE
- UNCHANGED
- NONE
- NONE
- HIGH
- NONE
CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
The software constructs a string for a command to executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
References
Advisory Timeline
- Published
