4.6

CVE-2022-43442

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fsi ≫ Fs040u Firmware Version <= 2.3.4
   Fsi ≫ Fs040u Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.3% 0.21
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://jvn.jp/en/jp/JVN74285622/index.html
Third Party Advisory
https://www.fsi.co.jp/mobile/plusF/news/22102801.html
Vendor Advisory
https://www.fsi.co.jp/mobile/plusF/news/22102802.html
Vendor Advisory
Not Applicable
https://www.fsi.co.jp/mobile/plusF/news/22102803.html
Vendor Advisory
Not Applicable
https://www.fsi.co.jp/mobile/plusF/news/22102804.html
Vendor Advisory
Not Applicable