CyberRota Analysis
AI-GeneratedVersions of UAC prior to 3.3.0 are vulnerable to a command injection flaw in the _run_command function, allowing attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data inputs. This vulnerability can lead to remote code execution on the analyst's host when processing malicious evidence. Organizations using UAC should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can exploit this vulnerability through crafted evidence inputs, mounted images with hostile filenames, or tampered artifact definitions to achieve remote code execution on the analyst's host when processing evidence.