Lucene search

K
nvd[email protected]NVD:CVE-2022-23768
HistorySep 19, 2022 - 8:15 p.m.

CVE-2022-23768

2022-09-1920:15:12
CWE-284
web.nvd.nist.gov
vulnerability
nis-hap11ac
exposed port
telnet service
remote attack
source code hijacking
device control

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.004 Low

EPSS

Percentile

73.4%

This Vulnerability in NIS-HAP11AC is caused by an exposed external port for the telnet service. Remote attackers use this vulnerability to induce all attacks such as source code hijacking, remote control of the device.

Affected configurations

NVD
Node
neoinfosysnis-hap11ac_firmwareMatch3.0b20201117095902
AND
neoinfosysnis-hap11acMatch-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.004 Low

EPSS

Percentile

73.4%

Related for NVD:CVE-2022-23768