Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-40629

Опубликовано: 23 сент. 2022
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to view sensitive information on the targeted device.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tacitine:en6200-prime_quad-35_firmware:*:*:*:*:*:*:*:*
Версия от 19.1.1 (включая) до 22.21.2 (исключая)
cpe:2.3:h:tacitine:en6200-prime_quad-35:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:tacitine:en6200-prime_quad-100_firmware:*:*:*:*:*:*:*:*
Версия от 19.1.1 (включая) до 22.21.2 (исключая)
cpe:2.3:h:tacitine:en6200-prime_quad-100:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02313
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to view sensitive information on the targeted device.

EPSS

Процентиль: 84%
0.02313
Низкий

7.5 High

CVSS3

Дефекты

CWE-200
NVD-CWE-noinfo