All CVE records

CVE-2022-42948 — Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

CISA KEV listed Added March 30, 2023 Remediate by April 20, 2023

Description

Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/; https://nvd.nist.gov/vuln/detail/CVE-2022-42948

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer