CVE-2022-4510: Directory Traversal RCE Vulnerability in binwalk

A path traversal vulnerability (CVE-2022-4510) was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 (inclusive). This vulnerability allows remote attackers to execute arbitrary code on affected installations of binwalk. User interaction is required to exploit this vulnerability in that the target must open the malicious file with binwalk using extract mode (-e option). The issue lies within the PFS (obscure filesystem format found in some embedded devices) extractor plugin that was merged into binwalk in 2017. Write-ups/tutorials aimed …

attackers code cve devices directory directory traversal embedded exploit extract file filesystem issue labs lies malicious mode path path traversal pfs plugin rce target version vulnerability