Lucene search

K
nvd[email protected]NVD:CVE-2022-41645
HistoryJan 03, 2023 - 3:15 a.m.

CVE-2022-41645

2023-01-0303:15:10
CWE-125
web.nvd.nist.gov
3
v-server
out-of-bounds read
vulnerability
arbitrary code
project file

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

25.2%

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

Affected configurations

Nvd
Node
fujielectricv-serverRange4.0.12.0
VendorProductVersionCPE
fujielectricv-server*cpe:2.3:a:fujielectric:v-server:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

25.2%

Related for NVD:CVE-2022-41645