CVE-2022-50919 — AI Deep Analysis Summary

🚨 **Essence**: Tdarr (v2.00.15) suffers from **OS Command Injection** via the Help terminal. <br>💥 **Consequences**: Attackers can execute **arbitrary commands** on the host system.…

🛡️ **Root Cause**: **CWE-78** (Improper Neutralization of Special Elements used in an OS Command).…

📦 **Affected**: **Tdarr** multimedia transcode automation platform. <br>📌 **Version**: Specifically **v2.00.15**. <br>🏢 **Vendor**: Tdarr Company.

💀 **Privileges**: The injected commands run with the **privileges of the Tdarr process**. <br>📂 **Data**: Attackers can read/write files, exfiltrate sensitive data, or pivot to other internal systems.…

⚡ **Threshold**: **LOW**. <br>🔓 **Auth**: **Unauthenticated** (No login required). <br>🌐 **Access**: Remote (Network Accessible). <br>👀 **UI**: None required (Direct exploitation).

💣 **Public Exploit**: **YES**. <br>🔗 **Source**: ExploitDB ID **50822** is available. <br>🔥 **Status**: Wild exploitation is possible since the PoC is public and requires no authentication.

🔍 **Self-Check**: <br>1. Verify your Tdarr version is **2.00.15**. <br>2. Check if the **Help terminal** is exposed to the internet. <br>3. Use scanners targeting **CWE-78** in web interfaces. <br>4.…

🛠️ **Fix**: Update Tdarr to a version **newer than 2.00.15** where the input sanitization for the Help terminal is patched.…

🚧 **No Patch Workaround**: <br>1. **Block Access**: Restrict network access to the Help terminal port (Firewall rules). <br>2. **Disable**: If possible, disable the 'Help' feature or terminal access entirely. <br>3.…

🚨 **Urgency**: **CRITICAL**. <br>⏱️ **Priority**: **Immediate Action Required**. <br>📉 **Reason**: Unauthenticated, remote, and public exploit exists. This is a 'zero-day' style risk for any exposed instance.…