CVE-2022-47526: Fox-It Fox Datadiode Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.

Affected products

• Fox-It Fox Datadiode Firmware: version 3.4.3 only

Published 2023-05-31. Last modified 2026-06-17.