CVE-2022-33106

CRITICAL

9.8

Beschreibung

WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin password leading to Account Take Over.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht10/12/2022

Zuletzt geandert5/16/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

wijungle:u250wijungle:u250_firmware

Schwachen (CWE)

CWE-307CWE-307

Referenzen

http://wijungle.com(cve@mitre.org)

https://hexisanoob.gitbook.io/hexisanoob/cves/cve-2022-33106(cve@mitre.org)

http://wijungle.com(af854a3a-2127-422b-91ae-364da2661108)

https://hexisanoob.gitbook.io/hexisanoob/cves/cve-2022-33106(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.