Lucene search

K
cve[email protected]CVE-2022-27152
HistoryApr 08, 2022 - 6:15 p.m.

CVE-2022-27152

2022-04-0818:15:09
web.nvd.nist.gov
51
roku
rokuos
cve-2022-27152
vulnerability
wifi
realtek
file modification
nvd

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:S/C:N/I:P/A:N

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.

Affected configurations

NVD
Node
rokuroku_osRange9.4.0
AND
rokuexpressMatch-
OR
rokuexpress_4k\+Match-
OR
rokuroku_tvMatch-
OR
rokustreambarMatch-
OR
rokustreambar_proMatch-
OR
rokustreaming_stick_4kMatch-
OR
rokustreaming_stick_4k\+Match-
OR
rokuultraMatch-
OR
rokuwireless_speakersMatch-
OR
rokuwireless_subwooferMatch-
CPENameOperatorVersion
roku:roku_osroku roku osle9.4.0

2.7 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:S/C:N/I:P/A:N

5.7 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Related for CVE-2022-27152