SOCT GXP Vulnerability Advisory: XXE, RCE, Path Traversal, Unauth Access (CVE-2022-34977, 34981, 34984, etc.)

Critical Vulnerability Information 1. XXE in SOCT GXP File Processing CVE: CVE-2022-34977 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: SOCT GXP contains an XXE vulnerability when processing XML files, allowing attackers to read arbitrary files on the system. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later. 2. Reflected Cross-Site Scripting in GXP Job Service CVE: CVE-2022-34981 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: A reflected XSS vulnerability exists in the GXP Job Service, enabling attackers to inject malicious script code via crafted requests. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later. 3. Command Injection in SOCT GXP Job Service CVE: CVE-2022-34984 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: A command injection vulnerability exists in the SOCT GXP Job Service, allowing attackers to execute arbitrary commands via crafted requests. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later. 4. Path Traversal may allow malicious files to be read in SOCT GXP Job Service CVE: CVE-2022-34985 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: A path traversal vulnerability exists in the SOCT GXP Job Service, enabling attackers to read arbitrary files via crafted requests. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later. 5. Unauthenticated access to the GXP Job Service on Port 44300 CVE: CVE-2022-34983 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: The GXP Job Service on port 44300 is vulnerable to unauthenticated access, allowing attackers to access the service without authentication. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later. 6. Unauthenticated access to the GXP Job Status service on Port 44302 CVE: CVE-2022-34982 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: The GXP Job Status service on port 44302 is vulnerable to unauthenticated access, allowing attackers to access the service without authentication. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later. 7. Client-Side Request Forgery in the GXP Job Status Service CVE: CVE-2022-34986 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: A client-side request forgery (CSRF) vulnerability exists in the GXP Job Status Service, allowing attackers to perform CSRF attacks via crafted requests. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later. 8. Information Disclosure in the GXP Job Status Service CVE: CVE-2022-34980 Affected Versions: SOCT GXP v4.6.0.2 and earlier Description: An information disclosure vulnerability exists in the GXP Job Status Service, enabling attackers to obtain sensitive information via crafted requests. Mitigation: Upgrade to SOCT GXP v4.6.0.3 or later.

Goal Reached Thanks to every supporter — we hit 100%!

SOCT GXP Vulnerability Advisory: XXE, RCE, Path Traversal, Unauth Access (CVE-2022-34977, 34981, 34984, etc.)