Lucene search

[email protected]CVE-2022-32958

HistoryJul 20, 2022 - 2:15 a.m.

CVE-2022-32958

2022-07-2002:15:07

CWE-770

[email protected]

web.nvd.nist.gov

cve-2022-32958

nvd

teamplus pro

chat process

remote attacker

message size limit

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

51.2%

JSON

A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate other recipients’ Teamplus Pro chat process.

Affected configurations

NVD

Node

teamplusteam\+_proRange≤3.011.6.0.1private_cloudandroid

teamplusteam\+_proRange≤3.011.6.0.1private_cloudiphone_os

CPENameOperatorVersion
teamplus:team\+_proteamplus team+ prole3.011.6.0.1

CPE	Name	Operator	Version
teamplus:team\+_pro	teamplus team+ pro	le	3.011.6.0.1

CNA Affected

[
  {
    "platforms": [
      "Android "
    ],
    "product": "Teamplus Pro (Private cloud)",
    "vendor": "TEAMPLUS TECHNOLOGY INC.",
    "versions": [
      {
        "lessThanOrEqual": "3.011.6.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "iOS"
    ],
    "product": "Teamplus Pro (Private cloud)",
    "vendor": "TEAMPLUS TECHNOLOGY INC.",
    "versions": [
      {
        "lessThanOrEqual": "3.011.6.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-6289-a5524-1.html

Social References

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

51.2%

JSON

Related for CVE-2022-32958

nvd1 prion1 cvelist1