← CVE Radar
CVE-2022-42948Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely execute code in the Cobalt Strike UI.
9.8 CRITICALEPSS 2.70%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Apr 20, 2023
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2022-42948
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Mar 24, 2023
- Last modified
- 2026-06-17 05:05 UTC
Affected Products
From NVD CPE configurations.
helpsystemscobalt strike1 version range
- 4.7.1
References
- thesecmaster.com https://thesecmaster.com/how-to-fix-cve-2022-42948-a-critical-rce-vulnerability-in-cobalt-strike/
- cobaltstrike.com https://www.cobaltstrike.com/blog/
- redpacketsecurity.com https://www.redpacketsecurity.com/helpsystems-cobalt-strike-code-execution-cve-2022-42948/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42948