Lucene search

K
cve[email protected]CVE-2022-3682
HistoryMar 28, 2023 - 12:15 p.m.

CVE-2022-3682

2023-03-2812:15:07
CWE-434
web.nvd.nist.gov
26
sdm600
vulnerability
file permission
validation
arbitrary code execution
cve-2022-3682
nvd
security
hitachi energy

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

A vulnerability exists in the SDM600 file permission validation.
An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing.

This issue affects:Β All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291)

List of CPEs:

  • cpe:2.3:a:hitachienergy:sdm600:1.0:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.1:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.21000.105:::::::*
  • cpe:2.3:a:hitachienergy:sdm600:1.2.23000.291:::::::*

Affected configurations

NVD
Node
hitachienergysdm600Range1.0–1.3.0.1339

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SDM600",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "unaffected",
        "version": "SDM600 1.3"
      },
      {
        "lessThanOrEqual": "SDM600 1.2.*",
        "status": "affected",
        "version": "SDM600 1.2",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "SDM600 1.1.*",
        "status": "affected",
        "version": "SDM600 1.1",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "SDM600 1.0.*",
        "status": "affected",
        "version": "SDM600 1.0;",
        "versionType": "custom"
      }
    ]
  }
]

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

Related for CVE-2022-3682