CVE-2022-46397

Опубликовано: 28 мар. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.

Ссылки

https://lists.fd.io/g/security-announce/message/2
Vendor Advisory
https://s3-docs.fd.io/vpp/23.02/
Product
https://lists.fd.io/g/security-announce/message/2
Vendor Advisory
https://s3-docs.fd.io/vpp/23.02/
Product

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:lfprojects:vector_packet_processor:19.04:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:19.08:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:20.01:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:20.05:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:20.09:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:21.01:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:21.06:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:21.10:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:22.02:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:22.06:*:*:*:*:*:*:*

cpe:2.3:a:lfprojects:vector_packet_processor:22.10:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00207

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-Other

CWE-329

Связанные уязвимости

GHSA-xxw7-44hw-5xgc