CVE-2022-37680

Опубликовано: 29 авг. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system (Camera, Decoder and Encoder) and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID hitachi-sec-2022-001 contains fixes for the issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:hitachi:hc-ip9100hd_firmware:*:*:*:*:*:*:*:*

Версия до 1.07 (включая)

cpe:2.3:h:hitachi:hc-ip9100hd:-:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00295

Низкий

7.5 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

GHSA-crg5-2m8j-62r8

CVSS3: 7.5

github

больше 3 лет назад

An access control issue in Hitachi Kokusai Electric Inc ISnex HC-IP9100HD Version 1.07 and below allows attackers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi.

BDU:2022-05365

CVSS3: 8.6

fstec