CVE-2022-42953 - Vulnerability Details

Vendors	Products
Zkteco	Zem500 Zem500 Firmware Zem510 Zem510 Firmware Zem560 Zem560 Firmware Zem600 Zem600 Firmware Zem720 Zem720 Firmware Zem760 Zem760 Firmware Zem800 Zem800 Firmware Zmm200 Zmm200 Firmware Zmm210 Zmm210 Firmware Zmm220 Zmm220 Firmware

Link	Providers
https://seclists.org/fulldisclosure/2022/Oct/23
https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-42953", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-03T13:19:05.508Z", "dateReserved": "2022-10-15T00:00:00", "datePublished": "2022-12-25T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2022-12-25T00:00:00"}, "descriptions": [{"lang": "en", "value": "Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210)."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses"}, {"url": "https://seclists.org/fulldisclosure/2022/Oct/23"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T13:19:05.508Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses", "tags": ["x_transferred"]}, {"url": "https://seclists.org/fulldisclosure/2022/Oct/23", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-42953 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2024-08-03T13:19:05.508Z (string)

dateReserved : 2022-10-15T00:00:00 (string)

datePublished : 2022-12-25T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2022-12-25T00:00:00 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210). (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses (string)

}

1 : { »

url : https://seclists.org/fulldisclosure/2022/Oct/23 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T13:19:05.508Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://seclists.org/fulldisclosure/2022/Oct/23 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zmm200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF7C16D7-9B1D-430D-A230-6E9C4C0DB5EE", "versionEndExcluding": "15.00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zmm200:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FFC38EE-21E3-4A74-8779-35DDFB19EFF4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zmm210_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0B92DEB0-E3CE-4A10-B943-FA7B1C9C96DC", "versionEndExcluding": "15.00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zmm210:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1E20B94-62F4-42A9-9983-A5A54CC003EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zmm220_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "22D232F9-22FE-4508-A0B0-56B6A6257256", "versionEndExcluding": "15.00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zmm220:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA70D382-EC49-4A9B-A74E-ED6B016C1A2E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zem720_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6F98619-D54B-4688-8724-65BE3770DD88", "versionEndExcluding": "8.88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zem720:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF7FD86E-7B96-409A-8170-3671B92327F0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zem600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD80C4C1-A941-4A42-AB98-5D1E9D9A3FAC", "versionEndExcluding": "8.88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zem600:-:*:*:*:*:*:*:*", "matchCriteriaId": "D047CDEA-5A9C-4E6F-9632-011CFBA43802", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zem800_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "09EC8664-23DD-45DE-B9C9-DCC884395FEA", "versionEndExcluding": "8.88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zem800:-:*:*:*:*:*:*:*", "matchCriteriaId": "861E1B88-7815-4286-99DE-6AA4E2F27AAA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zem510_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD4C666F-AA91-4959-9FF0-899B34251918", "versionEndExcluding": "8.88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zem510:-:*:*:*:*:*:*:*", "matchCriteriaId": "B262D4EF-E1D2-4D7C-B823-258236ECBE55", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zem560_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D792315B-4565-4E5E-903C-A8857AC5ECAA", "versionEndExcluding": "8.88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zem560:-:*:*:*:*:*:*:*", "matchCriteriaId": "3BFD73B4-0BCD-4B53-B76C-CA0AE66E8A65", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zem760_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BC321B1A-04A5-43CB-BAC4-96F1E33E6526", "versionEndExcluding": "8.88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zem760:-:*:*:*:*:*:*:*", "matchCriteriaId": "7782B116-1D87-4D7D-9217-C71CAE5D49A2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:zkteco:zem500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1221D70C-B49F-4719-B012-AEF64A9E219A", "versionEndExcluding": "8.88", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:zkteco:zem500:-:*:*:*:*:*:*:*", "matchCriteriaId": "7A4E42AF-815B-4506-A57F-3BFF6825443A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210)."}, {"lang": "es", "value": "Ciertos productos ZKTeco (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) permiten el acceso a informaci\u00f3n confidencial a trav\u00e9s de solicitudes directas para las URL form/DataApp?style=1 y form/DataApp?style=0. Las versiones afectadas pueden ser anteriores a la 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) y 15.00 (ZMM200-220-210). Las versiones fijas son la versi\u00f3n de firmware 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) y la versi\u00f3n de firmware 15.00 (ZMM200-220-210)."}], "id": "CVE-2022-42953", "lastModified": "2024-11-21T07:25:40.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-25T05:15:10.433", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "url": "https://seclists.org/fulldisclosure/2022/Oct/23"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "url": "https://seclists.org/fulldisclosure/2022/Oct/23"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-425"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zmm200_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FF7C16D7-9B1D-430D-A230-6E9C4C0DB5EE (string)

versionEndExcluding : 15.00 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zmm200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FFC38EE-21E3-4A74-8779-35DDFB19EFF4 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zmm210_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0B92DEB0-E3CE-4A10-B943-FA7B1C9C96DC (string)

versionEndExcluding : 15.00 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zmm210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F1E20B94-62F4-42A9-9983-A5A54CC003EA (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zmm220_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 22D232F9-22FE-4508-A0B0-56B6A6257256 (string)

versionEndExcluding : 15.00 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zmm220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FA70D382-EC49-4A9B-A74E-ED6B016C1A2E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zem720_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B6F98619-D54B-4688-8724-65BE3770DD88 (string)

versionEndExcluding : 8.88 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zem720:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BF7FD86E-7B96-409A-8170-3671B92327F0 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zem600_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : CD80C4C1-A941-4A42-AB98-5D1E9D9A3FAC (string)

versionEndExcluding : 8.88 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zem600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D047CDEA-5A9C-4E6F-9632-011CFBA43802 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zem800_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 09EC8664-23DD-45DE-B9C9-DCC884395FEA (string)

versionEndExcluding : 8.88 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zem800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 861E1B88-7815-4286-99DE-6AA4E2F27AAA (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

6 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zem510_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BD4C666F-AA91-4959-9FF0-899B34251918 (string)

versionEndExcluding : 8.88 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zem510:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B262D4EF-E1D2-4D7C-B823-258236ECBE55 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

7 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zem560_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D792315B-4565-4E5E-903C-A8857AC5ECAA (string)

versionEndExcluding : 8.88 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zem560:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3BFD73B4-0BCD-4B53-B76C-CA0AE66E8A65 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

8 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zem760_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BC321B1A-04A5-43CB-BAC4-96F1E33E6526 (string)

versionEndExcluding : 8.88 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zem760:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7782B116-1D87-4D7D-9217-C71CAE5D49A2 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

9 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:zkteco:zem500_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1221D70C-B49F-4719-B012-AEF64A9E219A (string)

versionEndExcluding : 8.88 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:zkteco:zem500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7A4E42AF-815B-4506-A57F-3BFF6825443A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and 15.00 (ZMM200-220-210). The fixed versions are firmware version 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) and firmware version 15.00 (ZMM200-220-210). (string)

}

1 : { »

lang : es (string)

value : Ciertos productos ZKTeco (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) permiten el acceso a información confidencial a través de solicitudes directas para las URL form/DataApp?style=1 y form/DataApp?style=0. Las versiones afectadas pueden ser anteriores a la 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) y 15.00 (ZMM200-220-210). Las versiones fijas son la versión de firmware 8.88 (ZEM500-510-560-760, ZEM600-800, ZEM720) y la versión de firmware 15.00 (ZMM200-220-210). (string)

}

]

id : CVE-2022-42953 (string)

lastModified : 2024-11-21T07:25:40.550 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-12-25T05:15:10.433 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Exploit (string)

1 : Mailing List (string)

2 : Third Party Advisory (string)

]

url : https://seclists.org/fulldisclosure/2022/Oct/23 (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Mailing List (string)

2 : Third Party Advisory (string)

]

url : https://seclists.org/fulldisclosure/2022/Oct/23 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-425 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object