Lucene search

K
nvd[email protected]NVD:CVE-2022-39061
HistoryJan 31, 2023 - 8:15 a.m.

CVE-2022-39061

2023-01-3108:15:08
CWE-125
web.nvd.nist.gov
changingtech megaservisignadapter
out-of-bounds read
insufficient validation
parameter length
unauthenticated remote attacker
sensitive content
disrupts services

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

0.001 Low

EPSS

Percentile

48.0%

ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated remote attacker can exploit this vulnerability to access partial sensitive content in memory and disrupts partial services.

Affected configurations

NVD
Node
changingtecmegaservisignadapterRange<1.0.22.1004windows

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

0.001 Low

EPSS

Percentile

48.0%

Related for NVD:CVE-2022-39061