Lucene search

[email protected]CVE-2022-34598

HistoryJul 06, 2022 - 5:15 p.m.

CVE-2022-34598

2022-07-0617:15:08

[email protected]

web.nvd.nist.gov

cve-2022-34598

udpserver

h3c magic

v200r004

v100r005

9034 port

arbitrary commands

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

JSON

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.

Affected configurations

NVD

Node

h3cmagic_r100_firmwareMatchv100r005

h3cmagic_r100_firmwareMatchv200r004

AND

h3cmagic_r100Match-

CPENameOperatorVersion
h3c:magic_r100_firmwareh3c magic r100 firmwareeqv100r005
h3c:magic_r100_firmwareh3c magic r100 firmwareeqv200r004

CPE	Name	Operator	Version
h3c:magic_r100_firmware	h3c magic r100 firmware	eq	v100r005
h3c:magic_r100_firmware	h3c magic r100 firmware	eq	v200r004

References

github.com/zhefox/IOT_Vul/tree/main/H3C/H3CR100/1

Social References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

JSON

Related for CVE-2022-34598

cvelist1 nvd1 prion1