5.3

CVE-2022-3090

Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redlion ≫ Crimson Version < 3.0
Redlion ≫ Crimson Version 3.0 Update -
Redlion ≫ Crimson Version 3.0 Update build_477.003
Redlion ≫ Crimson Version 3.0 Update build_493.003
Redlion ≫ Crimson Version 3.0 Update build_493.004
Redlion ≫ Crimson Version 3.0 Update build_493.005
Redlion ≫ Crimson Version 3.0 Update build_502.000
Redlion ≫ Crimson Version 3.0 Update build_502.001
Redlion ≫ Crimson Version 3.0 Update build_502.003
Redlion ≫ Crimson Version 3.0 Update build_515.002
Redlion ≫ Crimson Version 3.0 Update build_515.003
Redlion ≫ Crimson Version 3.0 Update build_523.003
Redlion ≫ Crimson Version 3.0 Update build_530.000
Redlion ≫ Crimson Version 3.0 Update build_530.001
Redlion ≫ Crimson Version 3.0 Update build_530.002
Redlion ≫ Crimson Version 3.0 Update build_530.003
Redlion ≫ Crimson Version 3.0 Update build_548.001
Redlion ≫ Crimson Version 3.0 Update build_548.005
Redlion ≫ Crimson Version 3.0 Update build_573.001
Redlion ≫ Crimson Version 3.0 Update build_573.002
Redlion ≫ Crimson Version 3.0 Update build_579.001
Redlion ≫ Crimson Version 3.0 Update build_579.003
Redlion ≫ Crimson Version 3.0 Update build_582.000
Redlion ≫ Crimson Version 3.0 Update build_582.001
Redlion ≫ Crimson Version 3.0 Update build_582.003
Redlion ≫ Crimson Version 3.0 Update build_582.004
Redlion ≫ Crimson Version 3.0 Update build_599.000
Redlion ≫ Crimson Version 3.0 Update build_599.001
Redlion ≫ Crimson Version 3.0 Update build_603.000
Redlion ≫ Crimson Version 3.0 Update build_605.002
Redlion ≫ Crimson Version 3.0 Update build_615.004
Redlion ≫ Crimson Version 3.0 Update build_619.002
Redlion ≫ Crimson Version 3.0 Update build_619.004
Redlion ≫ Crimson Version 3.0 Update build_624.000
Redlion ≫ Crimson Version 3.0 Update build_624.005
Redlion ≫ Crimson Version 3.0 Update build_635.000
Redlion ≫ Crimson Version 3.0 Update build_635.001
Redlion ≫ Crimson Version 3.0 Update build_639.000
Redlion ≫ Crimson Version 3.0 Update build_640.000
Redlion ≫ Crimson Version 3.0 Update build_640.001
Redlion ≫ Crimson Version 3.0 Update build_640.002
Redlion ≫ Crimson Version 3.0 Update build_647.002
Redlion ≫ Crimson Version 3.0 Update build_657.001
Redlion ≫ Crimson Version 3.0 Update build_657.003
Redlion ≫ Crimson Version 3.0 Update build_662.002
Redlion ≫ Crimson Version 3.0 Update build_662.006
Redlion ≫ Crimson Version 3.0 Update build_675.000
Redlion ≫ Crimson Version 3.0 Update build_678.002
Redlion ≫ Crimson Version 3.0 Update build_683.000
Redlion ≫ Crimson Version 3.0 Update build_683.001
Redlion ≫ Crimson Version 3.0 Update build_683.002
Redlion ≫ Crimson Version 3.0 Update build_690.001
Redlion ≫ Crimson Version 3.0 Update build_690.002
Redlion ≫ Crimson Version 3.0 Update build_693.000
Redlion ≫ Crimson Version 3.0 Update build_694.000
Redlion ≫ Crimson Version 3.0 Update build_697.001
Redlion ≫ Crimson Version 3.0 Update build_697.002
Redlion ≫ Crimson Version 3.0 Update build_697.003
Redlion ≫ Crimson Version 3.0 Update build_700.000
Redlion ≫ Crimson Version 3.0 Update build_702.002
Redlion ≫ Crimson Version 3.0 Update build_702.004
Redlion ≫ Crimson Version 3.0 Update build_703.001
Redlion ≫ Crimson Version 3.0 Update build_705.000
Redlion ≫ Crimson Version 3.0 Update build_707.000
Redlion ≫ Crimson Version 3.1 Update -
Redlion ≫ Crimson Version 3.1 Update build_3100.000
Redlion ≫ Crimson Version 3.1 Update build_3100.002
Redlion ≫ Crimson Version 3.1 Update build_3100.003
Redlion ≫ Crimson Version 3.1 Update build_3100.008
Redlion ≫ Crimson Version 3.1 Update build_3100.009
Redlion ≫ Crimson Version 3.1 Update build_3100.010
Redlion ≫ Crimson Version 3.1 Update build_3101.001
Redlion ≫ Crimson Version 3.1 Update build_3104.000
Redlion ≫ Crimson Version 3.1 Update build_3106.000
Redlion ≫ Crimson Version 3.1 Update build_3106.004
Redlion ≫ Crimson Version 3.1 Update build_3108.002
Redlion ≫ Crimson Version 3.1 Update build_3108.004
Redlion ≫ Crimson Version 3.1 Update build_3109.003
Redlion ≫ Crimson Version 3.1 Update build_3109.004
Redlion ≫ Crimson Version 3.1 Update build_3110.000
Redlion ≫ Crimson Version 3.1 Update build_3110.002
Redlion ≫ Crimson Version 3.1 Update build_3110.004
Redlion ≫ Crimson Version 3.1 Update build_3111.000
Redlion ≫ Crimson Version 3.1 Update build_3112.000
Redlion ≫ Crimson Version 3.1 Update build_3113.000
Redlion ≫ Crimson Version 3.1 Update build_3114.002
Redlion ≫ Crimson Version 3.1 Update build_3115.006
Redlion ≫ Crimson Version 3.1 Update build_3115.008
Redlion ≫ Crimson Version 3.1 Update build_3115.009
Redlion ≫ Crimson Version 3.1 Update build_3116.000
Redlion ≫ Crimson Version 3.1 Update build_3119.001
Redlion ≫ Crimson Version 3.1 Update build_3119.002
Redlion ≫ Crimson Version 3.1 Update build_3120.000
Redlion ≫ Crimson Version 3.1 Update build_3120.001
Redlion ≫ Crimson Version 3.1 Update build_3121.000
Redlion ≫ Crimson Version 3.1 Update build_3122.000
Redlion ≫ Crimson Version 3.1 Update build_3122.001
Redlion ≫ Crimson Version 3.1 Update build_3123.000
Redlion ≫ Crimson Version 3.1 Update build_3123.001
Redlion ≫ Crimson Version 3.1 Update build_3124.000
Redlion ≫ Crimson Version 3.1 Update build_3125.003
Redlion ≫ Crimson Version 3.1 Update build_3125.006
Redlion ≫ Crimson Version 3.1 Update build_3125.007
Redlion ≫ Crimson Version 3.1 Update build_3126.000
Redlion ≫ Crimson Version 3.1 Update build_3126.001
Redlion ≫ Crimson Version 3.2 Update -
Redlion ≫ Crimson Version 3.2 Update build_3.2.0008.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0014.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0015.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0016.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0020.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0021.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0025.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0026.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0030.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0031.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0035.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0036.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0040.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0041.0
Redlion ≫ Crimson Version 3.2 Update build_3.2.0044.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.61% 0.444
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
DHS.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-321-01
Third Party Advisory
US Government Resource