GHSA-xvw3-v5p5-pf8m

Опубликовано: 08 нояб. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 8.8

Описание

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.

Ссылки

EPSS

Процентиль: 74%

0.00853

Низкий

8.8 High

CVSS3

CVE ID

CVE-2022-43545

Дефекты

CWE-20

Связанные уязвимости

CVE-2022-43545

CVSS3: 9.9

nvd

почти 3 года назад

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SIC

BDU:2022-07317

CVSS3: 8.8

fstec

почти 3 года назад

Уязвимость параметра RecordType веб-интерфейса микропрограммного обеспечения измерителя мощности POWER METER SICAM Q100, позволяющая нарушителю вывести устройство из строя (с последующей автоматической перезагрузкой) или выполнить произвольный код

EPSS

Процентиль: 74%

0.00853

Низкий

8.8 High

CVSS3

CVE ID

CVE-2022-43545

Дефекты

CWE-20