CVE-2022-27933: 
Pexip Infinity Management Node vulnerability analysis and mitigation

Pexip Infinity before version 27.3 contains a vulnerability that allows remote attackers to trigger a software abort via One Touch Join functionality (Pexip Docs, NVD). The vulnerability was disclosed on July 17, 2022, and affects all versions of Pexip Infinity from version 24.0 up to (excluding) version 27.3.

The vulnerability has been assigned a CVSS v3.1 Base Score of 8.2 HIGH (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H) and a CVSS v2.0 Base Score of 5.8 MEDIUM (Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P) (NVD).

When exploited, this vulnerability allows remote attackers to cause a denial of service condition by triggering a software abort in the One Touch Join functionality (Pexip Docs).

The vulnerability can be exploited remotely without requiring authentication or user interaction. The attack complexity is considered low, making it relatively straightforward for attackers to exploit (NVD).

The vulnerability has been fixed in Pexip Infinity version 27.3. Users are advised to upgrade to this version or later to address the security issue (Pexip Docs).