CVE-2022-24125
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-24125
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send arbitrary push requests to clients via a RequestSendMessageToPlayers request. For example, ability to send a push message to hundreds of thousands of machines is only restricted on the client side, and can thus be bypassed with a modified client.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Bandai Namco FromSoftware Dark Souls III 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Bandai Namco FromSoftware Dark Souls III是日本FromSoftware公司的一款动作角色扮演游戏。 Bandai Namco FromSoftware Dark Souls III 到 2022-03-19 的匹配服务器存在安全漏洞，该漏洞允许远程攻击者通过 RequestSendMessageToPlayers 请求向客户端发送任意推送请求。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2022-24125
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Documentation and proof of concept code for CVE-2022-24125 and CVE-2022-24126. | https://github.com/tremwil/ds3-nrssr-rce | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-24125
请登录查看更多情报信息。
- https://github.com/tremwil/ds3-nrssr-rcex_refsource_MISC
- https://fromsoftware.jpx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-24125
Same Patch Batch · n/a · 2022-03-20 · 13 CVEs total
| CVE-2021-39384 | DWSurvey 代码问题漏洞 | |
| CVE-2021-42194 | 赞赞网络科技 EyouCms 代码问题漏洞 | |
| CVE-2021-39383 | DWSurvey 代码注入漏洞 | |
| CVE-2020-26008 | ShopXO 代码问题漏洞 | |
| CVE-2020-26007 | ShopXO 代码问题漏洞 | |
| CVE-2022-25462 | Yafu 安全漏洞 | |
| CVE-2022-26555 | Eova 跨站脚本漏洞 | |
| CVE-2022-26246 | TMS 跨站脚本漏洞 | |
| CVE-2022-26247 | TMS 安全漏洞 | |
| CVE-2022-25464 | DoraCMS 跨站脚本漏洞 | |
| CVE-2021-44345 | Ltd One Card Integrated Management SystemSQL注入漏洞 | |
| CVE-2022-25481 | ThinkPHP 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2022-24125
No comments yet