Lucene search

K
nvd[email protected]NVD:CVE-2022-35222
HistoryAug 02, 2022 - 4:15 p.m.

CVE-2022-35222

2022-08-0216:15:10
CWE-787
web.nvd.nist.gov

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

31.8%

HiCOS Citizen verification component has a stack-based buffer overflow vulnerability due to insufficient parameter length validation. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

Affected configurations

NVD
Node
hinethicos_natural_person_credential_component_clientMatch3.0.3.30306linux
OR
hinethicos_natural_person_credential_component_clientMatch3.0.3.30404macos
OR
hinethicos_natural_person_credential_component_clientMatch3.1.0.00002windows

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

31.8%

Related for NVD:CVE-2022-35222