Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:40 a.m.3 views

CVE-2022-35911

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...

7.5CVSS7.1AI score0.00572EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-10201

Malware in sbrugna...

10CVSS9.5AI score0.07003EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/08/29 11:15 p.m.1 views

CVE-2022-38625

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

8.8CVSS5.8AI score0.00265EPSS
Exploits0References4
NVD
NVD
added 2022/08/29 11:15 p.m.8 views

CVE-2022-38625

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

8.8CVSS0.00265EPSS
Exploits0References3
Prion
Prion
added 2022/08/29 11:15 p.m.11 views

Privilege escalation

DISPUTED Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's...

6.5CVSS8.6AI score0.00265EPSS
Exploits0References3Affected Software3
CVE
CVE
added 2022/08/29 10:46 p.m.67 views

CVE-2022-38625

Affected product: Patlite NH-FB (versions 1.46 and earlier). Issue: Insufficient firmware validation during the upgrade firmware file upload process, enabling authenticated attackers to upload their own custom firmware and inject malicious code. Root cause / details: Documented as a design choice...

8.8CVSS8.6AI score0.00265EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/08/29 10:46 p.m.12 views

CVE-2022-38625

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

8.8AI score0.00265EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2022/08/29 10:46 p.m.10 views

CVE-2022-38625

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

8.7AI score0.00265EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/08/29 12:0 a.m.1 views

Patlite 数据伪造问题漏洞

Patlite is a network monitoring indicator from Patlite Japan. It is used to detect network anomalies with instant notification by light, sound and email. A data forgery issue vulnerability exists in Patlite NH-FB v1.46 and earlier versions, which stems from insufficient firmware validation. The...

8.8CVSS6.9AI score0.00265EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/08/29 12:0 a.m.2 views

PT-2022-24489 · Patlite · Patlite Nh-Fb

Name of the Vulnerable Software and Affected Versions: Patlite NH-FB versions 1.46 and below Description: The issue is related to insufficient firmware validation during the upgrade firmware file upload process. This allows authenticated attackers to create and upload their own custom-built...

8.8CVSS6.8AI score0.00265EPSS
Exploits0References10
OSV
OSV
added 2022/07/27 9:15 p.m.1 views

CVE-2022-35911

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...

7.5CVSS5.8AI score0.00572EPSS
Exploits2References3
ATTACKERKB
ATTACKERKB
added 2022/07/27 9:15 p.m.3 views

CVE-2022-35911

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...

7.5CVSS7.1AI score0.00572EPSS
Exploits2References4
Prion
Prion
added 2022/07/27 9:15 p.m.11 views

Design/Logic Flaw

DISPUTED On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced."...

5CVSS7.5AI score0.00572EPSS
Exploits2References3Affected Software2
CVE
CVE
added 2022/07/27 8:5 p.m.58 views

CVE-2022-35911

Summary (CVE-2022-35911): Patlite NH-FB series devices up to firmware 1.46 are affected. The issue is described as a remote-denial-of-service condition triggered by omitting the query string in requests, though vendor notes dispute the DoS effect and indicate the event may not be reproducible. Pu...

7.5CVSS7.5AI score0.00572EPSS
Exploits2References3Affected Software1
Cvelist
Cvelist
added 2022/07/27 8:5 p.m.15 views

CVE-2022-35911

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...

7.8AI score0.00572EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2022/07/25 12:0 a.m.1 views

PT-2022-23017 · Patlite · Patlite Nh-Fb Series

Name of the Vulnerable Software and Affected Versions: Patlite NH-FB series devices through 1.46 Description: Remote attackers can cause a denial of service by omitting the query string. However, the vendor's perspective is that omitting the query string does not cause a denial of service and the...

7.5CVSS7.1AI score0.00572EPSS
Exploits2References7
Packet Storm
Packet Storm
added 2022/07/25 12:0 a.m.272 views

Patlite 1.46 Buffer Overflow

Exploit Title: CVE-2022-35911 - Patlite Overflow. Date: 2022-07-07 Exploit Author: Samy Younsi - Necrum Security Labs Vendor Homepage: https://www.patlite.co.jp Software Link: https://www.patlite.co.jp/product/detail0000021462.html Version: Versions 1.46 and bellow are affected Tested on: CentOs ...

0.5AI score0.00572EPSS
Exploits2
CNNVD
CNNVD
added 2022/07/25 12:0 a.m.1 views

Patlite 缓冲区错误漏洞

Patlite is a network monitoring indicator from Patlite Japan. It is used to detect network anomalies with instant notification by light, sound and email. A buffer error vulnerability exists in Patlite versions 1.45 and earlier, which stems from the fact that it allows an attacker to implement a...

7.5CVSS7.7AI score0.00572EPSS
Exploits2References6
NVD
NVD
added 2019/03/21 4:0 p.m.11 views

CVE-2018-18473

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...

10CVSS9.9AI score0.07003EPSS
Exploits1References2
Prion
Prion
added 2019/03/21 4:0 p.m.12 views

Default credentials

A hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV Series devices with firmware version 1.10 or earlier, and NBM Series devices with firmware version 1.09 or earlier allow attackers to enable an SSH daemon via the "kankichi" or "kamiyo4" password to the...

10CVSS9.8AI score0.07003EPSS
Exploits1References2
Rows per page
Query Builder