Lucene search
IcscertCVELIST:CVE-2022-3091HistoryJan 17, 2023 - 4:21 p.m.
CVE-2022-3091
2023-01-1716:21:57
CWE-200
icscert
www.cve.org
3
rond's epm
1.19.5
unauthenticated users
credential leak
os command execution
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
50.5%
RONDS EPM version 1.19.5 has a vulnerability in which a function could
allow unauthenticated users to leak credentials. In some circumstances,
an attacker can exploit this vulnerability to execute operating system
(OS) commands.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Equipment Predictive Maintenance Solution",
"vendor": "RONDS",
"versions": [
{
"status": "affected",
"version": "1.19.5 "
}
]
}
]Related
nvd
nvd
CVE-2022-3091
2023-01-17 17:15:11
prion
prion
Design/Logic Flaw
2023-01-17 17:15:00
cve
cve
CVE-2022-3091
2023-01-17 17:15:11
ics
ics
RONDS Equipment Predictive Maintenance Solution
2023-01-12 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
50.5%
Related for CVELIST:CVE-2022-3091