CVE-2022-2634

CRITICAL

10.0

Description

An attacker may be able to execute malicious actions due to the lack of device access protections and device permissions when using the web application. This could lead to uploading python files which can be later executed.

Details CVE

Score CVSS v3.110.0

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie8/10/2022

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

digi:connectport_x2ddigi:connectport_x2d_firmware

Faiblesses (CWE)

CWE-250

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01(ics-cert@hq.dhs.gov)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-216-01(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.