CVE-2022-38355

Опубликовано: 13 дек. 2022

Источник: nvd

CVSS3: 7.5

CVSS3: 5.5

EPSS Низкий

Описание

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to

attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.

Ссылки

https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-02
Third Party Advisory
US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-02
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:daikinlatam:svmpc1:*:*:*:*:*:*:*:*

Версия до 2.1.22 (включая)

cpe:2.3:a:daikinlatam:svmpc2:*:*:*:*:*:*:*:*

Версия до 1.2.3 (включая)

EPSS

Процентиль: 30%

0.00109

Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-284

NVD-CWE-Other

Связанные уязвимости

GHSA-h927-jjxq-8g5v

CVSS3: 5.5

github

около 3 лет назад

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.

EPSS

Процентиль: 30%

0.00109

Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-284

NVD-CWE-Other