Headline

CVE-2022-27903

An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files.

2 years ago

CVE

Open in Source

#vulnerability #web #google #ubuntu #log4j #auth #telnet #docker #ssl

Home

EVE - The Emulated Virtual Environment
For Network, Security and DevOps
Professionals

Important Note: LOG4J – CVE-2021-45046 CVE-2021-44228 CVE-2022-27903 DOES NOT affect EVE-NG.

EVE-NG Professional Edition:

EVE-NG PRO platform is ready for today’s IT-world requirements. It allows enterprises, e-learning providers/centers, individuals and group collaborators to create virtual proof of concepts, solutions and training environments.

EVE-NG PRO is the first clientless multivendor network emulation software that empowers network and security professionals with huge opportunities in the networking world. Clientless management options will allow EVE-NG PRO to be as the best choice for Enterprise engineers without influence of corporate security policies as it can be run in a completely isolated environment.

EVE Professional Edition: 4.0.1-86 EVE-NG Professional (01 May 2022)

Release notes link

Download EVE Professional

Upgrade notes:

If you are upgrading your EVE PRO or EVE LC form Versions 3.0.1-16 or later, please follow the link below:

Upgrade EVE Pro or LC to the newest version

If you are upgrading your EVE PRO or EVE LC form Versions 2.0.6.52 or earlier, please Contact to the EVE Live Helpdesk:

Live Helpdesk

EVE-NG Professional/Learning Center Cookbook

EVE-NG PRO/LC Cookbook version 4.14 (23 October, 2021)Download link EVE PRO/LC Cookbook Section updates: 3.3 Ubuntu download link update10.6 Remove Cloud interfaces for Editor and User14.1.5 Custom web page for server-gui docker14.1.6 Custom web page SSL for server-gui docker

****Some Features:****

EVE brings You the power You need to mastering your network within multivendor environment designing and testing.

KVM HW accelaration
Topology designer “click and play”
Import/export configuration
Labs xml file format
Picture import and maps “click and play”
Custom Kernel support for L2 protocols
Memory optimization ( UKSM )
CPU Watchdog
Full HTML5 User Interface
Ability to use without additionnals tools
Multiusers
Interaction with real network fully supported
Simultaneous lab instances
Derivated from Ubuntu LTS 18.04 server for long term support

****EVE-NG-PRO Emulation Software****

The brand new structure is created with many updated features and improvements.

Dynamic console porting, no limits, fixing issues for multi user consoling, Telnet porting choose is random
Hot links, interconnection running nodes, ports immediately response, shut no shut, Ethernet only
1024 nodes support per lab
Docker containers support
HTML desktop console to EVE management, clientless EVE management
Closing feature of running lab placing it to running folder, option run more than one lab simultaneously
Import/export configs for eve lab to/from local PC
Multiuser support, Administrator role only
EVE User account access time limitation
NAT cloud, integrated NAT option with DHCP on the EVE
Integrated Wireshark capture using docker, ethernet only
Multi configurations for single lab
Lab design features, links and objects
Custom template for own node deployment
Lab timer for self-training
EVE Labs control management
Information display of running labs and nodes per user. Admin control of processes
Link quality bandwidth, delay, jitter and loss set feature
EVE Cluster
Google Cloud EVE PRO support