CVE-2022-3575

CRITICAL

9.8

Description

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie11/2/2022

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

frauscher:frauscher_diagnostic_system_102

Faiblesses (CWE)

CWE-434

References

https://www.frauscher.com/en/psirt(info@cert.vde.com)

https://www.frauscher.com/en/psirt(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.