Lucene search

K
nvd[email protected]NVD:CVE-2023-46222
HistoryDec 19, 2023 - 4:15 p.m.

CVE-2023-46222

2023-12-1916:15:09
CWE-787
web.nvd.nist.gov
attacker
data packets
memory corruption
dos
code execution
cve-2023-46222

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

55.8%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.

Affected configurations

NVD
Node
ivantiavalancheRange<6.4.2premise
AND
microsoftwindowsMatch-

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

55.8%

Related for NVD:CVE-2023-46222