Lucene search

CERTVDECVELIST:CVE-2022-3575

HistoryNov 01, 2022 - 12:00 a.m.

CVE-2022-3575 Frauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability

2022-11-0100:00:00

CWE-434

CERTVDE

www.cve.org

frauscher sensortechnik

fds102

configuration upload

authentication bypass

device compromise

vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.

CNA Affected

[
  {
    "vendor": "Frauscher Sensortechnik",
    "product": "Diagnostic System FDS102",
    "versions": [
      {
        "version": "v2.8.0",
        "status": "affected",
        "lessThanOrEqual": "v2.9.1",
        "versionType": "custom"
      }
    ]
  }
]

References

www.frauscher.com/en/psirt

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

Related for CVELIST:CVE-2022-3575