cve/2022/CVE-2022-48474.md

19 lines
867 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2022-48474](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48474)
![](https://img.shields.io/static/v1?label=Product&message=Control%20de%20Ciber&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20v1.650%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%20Uncontrolled%20Resource%20Consumption&color=brighgreen)
### Description
Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475