Lucene search
HistoryNov 02, 2022 - 5:15 p.m.
CVE-2022-3575
frauscher sensortechnik
fds102
configuration upload
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.4%
Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.
Affected configurations
Node
frauscherfrauscher_diagnostic_system_102Match2.8.0fadc_r2
ORfrauscherfrauscher_diagnostic_system_102Match2.8.0fadci_r2
ORfrauscherfrauscher_diagnostic_system_102Match2.9.0fadc_r2
ORfrauscherfrauscher_diagnostic_system_102Match2.9.0fadci_r2
ORfrauscherfrauscher_diagnostic_system_102Match2.9.1fadc_r2
ORfrauscherfrauscher_diagnostic_system_102Match2.9.1fadci_r2
References
Related
cvelist
cvelist
prion
prion
Authentication flaw
2022-11-02 17:15:00
cve
cve
CVE-2022-3575
2022-11-02 17:15:18
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
58.4%
Related for NVD:CVE-2022-3575