IcscertCVELIST:CVE-2022-3090CVE-2022-3090
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
34.4%
Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user’s password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.
CNA Affected
[
{
"vendor": "Red Lion Controls",
"product": "Crimson 3.0",
"versions": [
{
"version": "All versions",
"status": "affected",
"lessThanOrEqual": "707.000",
"versionType": "custom"
}
]
},
{
"vendor": "Red Lion Controls",
"product": "Crimson 3.1",
"versions": [
{
"version": "All versions",
"status": "affected",
"lessThanOrEqual": "3126.001",
"versionType": "custom"
}
]
},
{
"vendor": "Red Lion Controls",
"product": "Crimson 3.2",
"versions": [
{
"version": "All versions",
"status": "affected",
"lessThanOrEqual": "3.2.0044.0",
"versionType": "custom"
}
]
}
]Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
34.4%