Lucene search

[email protected]CVE-2022-40184

HistoryOct 27, 2022 - 5:15 p.m.

CVE-2022-40184

2022-10-2717:15:10

CWE-79

[email protected]

web.nvd.nist.gov

cve-2022-40184

javascript filtering

videojet multi 4000

web interface

security vulnerability

5.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET multi 4000 allows an attacker with administrative credentials to store JavaScript code which will be executed for all administrators accessing the same configuration option.

Affected configurations

NVD

Node

boschvideojet_multi_4000_firmwareRange≤6.31.0010

AND

boschvideojet_multi_4000Match-

CPENameOperatorVersion
bosch:videojet_multi_4000_firmwarebosch videojet multi 4000 firmwarele6.31.0010

CPE	Name	Operator	Version
bosch:videojet_multi_4000_firmware	bosch videojet multi 4000 firmware	le	6.31.0010

CNA Affected

[
  {
    "vendor": "Bosch",
    "product": "VIDEOJET multi 4000",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "6.31.0010",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html

Social References

5.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Related for CVE-2022-40184

nvd1 prion1 cvelist1