CVE-2022-4636

🗓️ 10 Jan 2023 19:54:23Reported by icscertType

Black Box KVM Firmware v3.4.31307 on multiple ACR models vulnerable to path traversa

Reporter	Title	Published	Views	Family All 10
CNNVD	BlackBox 路径遍历漏洞	10 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-4636	10 Jan 202319:54	–	cvelist
EUVD	EUVD-2022-51966	3 Oct 202520:07	–	euvd
ICS	Black Box KVM	10 Jan 202300:00	–	ics
NVD	CVE-2022-4636	10 Jan 202320:15	–	nvd
OSV	CVE-2022-4636	10 Jan 202320:15	–	osv
Prion	Path traversal	10 Jan 202320:15	–	prion
Positive Technologies	PT-2023-14913	10 Jan 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-4636	5 Feb 202520:19	–	redhatcve
Vulnrichment	CVE-2022-4636	10 Jan 202319:54	–	vulnrichment

NVD

Vulners

Node

blackbox acr1000a-r-r2_firmwareMatch3.4.31307

AND

blackbox acr1000a-r-r2Match-

Node

blackbox acr1000a-t-r2_firmwareMatch3.4.31307

AND

blackbox acr1000a-t-r2Match-

Node

blackbox acr1002a-r_firmwareMatch3.4.31307

AND

blackbox acr1002a-rMatch-

Node

blackbox acr1002a-t_firmwareMatch3.4.31307

AND

blackbox acr1002a-tMatch-

Node

blackbox acr1020a-t_firmwareMatch3.4.31307

AND

blackbox acr1020a-tMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "KVM ACR1020A-T",
    "vendor": "Black Box",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.31307"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "KVM ACR1002A-R",
    "vendor": "Black Box",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.31307"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "KVM ACR1002A-T",
    "vendor": "Black Box",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.31307"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "KVM ACR1000A-T-R2",
    "vendor": "Black Box",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.31307"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "KVM ACR1000A-R-R2",
    "vendor": "Black Box",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.31307"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-23-010-01

17 Jun 2026 05:21Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.00876

SSVC

CWE-22