CVE-2022-42948β€”Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2023-03-30 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-42948
Project:
Fortra
Product:
Cobalt Strike
Date Added:
2023-03-30
Due Date:
2023-04-20
Last Updated:
June 21, 2025

Vulnerability Name

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Description

Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/
  • https://nvd.nist.gov/vuln/detail/CVE-2022-42948

Related Weaknesses

browse all CVEs