What’s Vulnerable › Vulnerabilities

CVE-2022-39838

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-05 · updated 2026-06-17
• Weakness: CWE-22

Description

Systematic FIX Adapter (ALFAFX) 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames.

Affected products

• Systematicalpha Systematic Fix Adapter Firmware: 2.4.0.25

References

• http://systematicalpha.com/company
• http://systematicalpha.com/trading-programs/systematic-alpha-fx-master-fund
• https://github.com/jet-pentest/CVE-2022-39838
• http://systematicalpha.com/company
• http://systematicalpha.com/trading-programs/systematic-alpha-fx-master-fund
• https://github.com/jet-pentest/CVE-2022-39838

Get alerted when CVE-2022-39838 or the next vulnerability affects your stack