CVE-2022-23992

Published: Feb 14, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges.

Affected (3)

Products: Broadcom: Xcom Data Transport

Broadcom

1 product

Xcom Data Transport

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Broadcom Xcom Data Transport	Version 11.6
Broadcom Xcom Data Transport	Version 11.6
Broadcom Xcom Data Transport	Version 11.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/XCOM-Data-Transport---Windows-and-XCOM-Data-Transport--Linux--UNIX-Vulnerability-CVE-2022-23992/18750

Source: vuln@ca.com

Permissions RequiredVendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVendor Advisory

Timeline

No history available yet.