Lucene search

[email protected]CVE-2022-45766

HistoryFeb 10, 2023 - 7:15 p.m.

CVE-2022-45766

2023-02-1019:15:12

CWE-798

[email protected]

web.nvd.nist.gov

cve-2022-45766

hardcoded credentials

global facilities management software

remote attackers

impact on availability

impact on confidentiality

impact on accessibility

impact on dependability

electronic key boxes

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

JSON

Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remote attackers to impact availability, confidentiality, accessibility and dependability of electronic key boxes.

Affected configurations

NVD

Node

keystorageglobal_facilities_management_softwareMatch3.0

CPENameOperatorVersion
keystorage:global_facilities_management_softwarekeystorage global facilities management softwareeq3.0

CPE	Name	Operator	Version
keystorage:global_facilities_management_software	keystorage global facilities management software	eq	3.0

References

www.girlslearncyber.com/post/the-key-to-keeping-keys-safe

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

9.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

JSON

Related for CVE-2022-45766

cvelist1 nvd1 prion1