How severe is CVE-2022-37237?

CVE-2022-37237 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2022-37237 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (49th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2022-37237?

CVE-2022-37237 affects Zlmediakit. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2022-37237?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2022-37237 published?

CVE-2022-37237 was published on 2022-08-30 and last updated on 2026-06-17.

CVE-2022-37237

CVE-2022-37237 is a high-severity vulnerability in Zlmediakit with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 1% (49th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Zlmediakit
Published: 2022-08-30
Last modified: 2026-06-17

Description

An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327.

Frequently asked questions

What is CVE-2022-37237?: An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely. Affected version is below commit 7d8b212a3c3368bc2f6507cb74664fc419eb9327.
How severe is CVE-2022-37237?: CVE-2022-37237 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2022-37237 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (49th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2022-37237?: CVE-2022-37237 affects Zlmediakit. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2022-37237?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2022-37237 published?: CVE-2022-37237 was published on 2022-08-30 and last updated on 2026-06-17.

References

https://github.com/ZLMediaKit/ZLMediaKit/issues/1839

Affected products (1)

cpe:2.3:a:zlmediakit:zlmediakit:*:*:*:*:*:*:*:*

More vulnerabilities in Zlmediakit

CVE-2026-35203 — High (CVSS 7.5): ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple…
CVE-2023-31861 — High (CVSS 7.5): ZLMediaKit 4.0 is vulnerable to Directory Traversal.
CVE-2023-39067 — Medium (CVSS 6.1): Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a…

All CVEs affecting Zlmediakit →