CVE-2022-46371 - OpenCVE

Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Alotceriot	Ar7088h-a Ar7088h-a Firmware

Configuration 1 [-]

AND

cpe:2.3:h:alotceriot:ar7088h-a:-:*:*:*:*:*:*:*

cpe:2.3:o:alotceriot:ar7088h-a_firmware:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.gov.il/en/Departments/faq/cve_advisories

History

No history.

MITRE

Status: PUBLISHED

Assigner: INCD

Published: 2023-01-12T00:00:00

Updated: 2024-08-03T14:31:46.316Z

Reserved: 2022-12-02T00:00:00

Link: CVE-2022-46371

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-01-12T16:15:10.377

Modified: 2023-01-23T16:46:11.127

Link: CVE-2022-46371

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:alotceriot:ar7088h-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "BCC895D2-A1CA-4E5B-AE75-F5F944370124", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:alotceriot:ar7088h-a_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B7DE5AE7-E9DF-4A0F-8F02-CAF9B53A4696", "versionEndIncluding": "16.10.3", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name."}, {"lang": "es", "value": "Divulgaci\u00f3n de informaci\u00f3n en Alotcer - AR7088H-A en la versi\u00f3n de firmware 16.10.3. El mensaje de error no especificado contiene el nombre de usuario administrador predeterminado."}], "id": "CVE-2022-46371", "lastModified": "2023-01-23T16:46:11.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "cna@cyber.gov.il", "type": "Secondary"}]}, "published": "2023-01-12T16:15:10.377", "references": [{"source": "cna@cyber.gov.il", "tags": ["Third Party Advisory"], "url": "https://www.gov.il/en/Departments/faq/cve_advisories"}], "sourceIdentifier": "cna@cyber.gov.il", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-209"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-200"}], "source": "cna@cyber.gov.il", "type": "Secondary"}]}