4.3

CVE-2022-42159

Exploit
D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dlink ≫ Covr 1203 Firmware Version 1.08
   Dlink ≫ Covr 1203 Version -
Dlink ≫ Covr 1202 Firmware Version 1.08
   Dlink ≫ Covr 1202 Version -
Dlink ≫ Covr 1200 Firmware Version 1.08
   Dlink ≫ Covr 1200 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.68% 0.491
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CISA-ADP 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

https://www.dlink.com/en/security-bulletin/
Vendor Advisory
https://github.com/14isnot40/vul_discovery/blob/master/D-Link%20COVR%2012xx%20.pdf
Third Party Advisory
Exploit