Skip to content
skopnix
Dossier · Vulnerability

Actively exploited · CISA KEV

CVE-2022-22948

  1. First PoC
  2. same day →Metasploit
  3. 404 days →First cited attacker

Signals

Exploited in the wild
Yesadded 2024-07-17 · due 2024-08-07. An observation, not a forecast.
EPSS · 30-day forecast
13%Chance of exploitation in the next 30 days, 96th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
not stated by sourcesNo NVD record yet.
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

1 known · links only

Metasploit1

  1. VMware vCenter Secrets Dump ↗

    Grab secrets and keys from the vCenter server and add them to loot. This module is tested against the vCenter appliance only; it will not work on Windows vCenter instances. It is intended to be run after successfully acquiring root access on a vCenter appliance and is useful for penetrating further into the environment following a vCenter exploit that results in a root shell. Secrets include the dcAccountDN and dcAccountPassw

    ruby · seen 2026-10-18

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.