9.8
CVE-2022-3575
- EPSS 0.47%
- Veröffentlicht 02.11.2022 17:15:18
- Zuletzt bearbeitet 21.11.2024 07:19:48
- Quelle info@cert.vde.com
- CVE-Watchlists
- Unerledigt
LoginFrauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Frauscher ≫ Frauscher Diagnostic System 102 Version2.8.0 SwPlatformfadc_r2
Frauscher ≫ Frauscher Diagnostic System 102 Version2.8.0 SwPlatformfadci_r2
Frauscher ≫ Frauscher Diagnostic System 102 Version2.9.0 SwPlatformfadc_r2
Frauscher ≫ Frauscher Diagnostic System 102 Version2.9.0 SwPlatformfadci_r2
Frauscher ≫ Frauscher Diagnostic System 102 Version2.9.1 SwPlatformfadc_r2
Frauscher ≫ Frauscher Diagnostic System 102 Version2.9.1 SwPlatformfadci_r2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.47% | 0.637 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| info@cert.vde.com | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.