Lucene search

LenovoCVE-2022-4003

HistoryJul 31, 2024 - 9:15 p.m.

CVE-2022-4003

2024-07-3121:15:14

CWE-400

lenovo

web.nvd.nist.gov

vulnerability

denial-of-service

authenticated

internal service restart

api request

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

Percentile

13.9%

JSON

A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request.

Affected configurations

Nvd

Node

motorolaq14_firmwareRange<1.5.0.16

AND

motorolaq14Match-

VendorProductVersionCPE
motorolaq14_firmware*cpe:2.3:o:motorola:q14_firmware:*:*:*:*:*:*:*:*
motorolaq14-cpe:2.3:h:motorola:q14:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
motorola	q14_firmware	*	cpe:2.3:o:motorola:q14_firmware::::::::
motorola	q14	-	cpe:2.3:h:motorola:q14:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Q14 Mesh Router Firmware",
    "vendor": "Motorola",
    "versions": [
      {
        "lessThan": "1.5.0.16",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

en-us.support.motorola.com/app/answers/detail/a_id/176952/~/motorola-q14-mesh-router-vulnerabilities

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

Percentile

13.9%

JSON

Related for CVE-2022-4003