PatchTheCVEwebcube vulnerabilities and fixes
Recent CVEs affecting webcube, with upgrade or downgrade steps. 2 tracked.
webcube has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-08-17. Highest priority: CVE-2022-28945 (score 64/100).
- CVE-2022-28945 CRITICAL 9.8 DOWNGRADE An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file.
- CVE-2022-23764 HIGH 8.8 UPGRADE The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update
FAQ
How do I fix webcube vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webcube being exploited right now?
None of the tracked webcube CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webcube CVE should I patch first?
CVE-2022-28945 currently ranks highest (64/100): An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file..