Lucene search
HistoryJan 17, 2023 - 5:15 p.m.
CVE-2022-3091
vulnerability
ronds epm
unauthenticated users
leak credentials
os commands
exploit
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
50.5%
RONDS EPM version 1.19.5 has a vulnerability in which a function could
allow unauthenticated users to leak credentials. In some circumstances,
an attacker can exploit this vulnerability to execute operating system
(OS) commands.
Affected configurations
Node
rondsequipment_predictive_maintenanceMatch1.19.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ronds | equipment_predictive_maintenance | 1.19.5 | cpe:2.3:a:ronds:equipment_predictive_maintenance:1.19.5:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2023-01-17 17:15:00
cve
cve
CVE-2022-3091
2023-01-17 17:15:11
cvelist
cvelist
CVE-2022-3091
2023-01-17 16:21:57
ics
ics
RONDS Equipment Predictive Maintenance Solution
2023-01-12 12:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.7
Confidence
High
EPSS
0.001
Percentile
50.5%
Related for NVD:CVE-2022-3091