Lucene search

[email protected]CVE-2022-3693

HistoryJan 13, 2023 - 8:15 a.m.

CVE-2022-3693

2023-01-1308:15:07

CWE-35

CWE-22

[email protected]

web.nvd.nist.gov

cve-2022-3693

path traversal

deytek informatics

fileorbis file management system

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

40.6%

JSON

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3.

Affected configurations

NVD

Node

fileorbisfileorbisRange<10.6.3

CPENameOperatorVersion
fileorbis:fileorbisfileorbislt10.6.3

CPE	Name	Operator	Version
fileorbis:fileorbis	fileorbis	lt	10.6.3

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "FileOrbis File Management System",
    "vendor": "Deytek Informatics",
    "versions": [
      {
        "lessThan": "10.6.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0021

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

40.6%

JSON

Related for CVE-2022-3693

nvd1 prion1 cvelist1