admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-29 09:41:31 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2022/CVE-2022-225xx/CVE-2022-22514.json

264 lines
9.7 KiB
JSON
Raw Normal View History

bootstrap
2023-04-24 12:24:31 +02:00
{
"id": "CVE-2022-22514",
"sourceIdentifier": "info@cert.vde.com",
"published": "2022-04-07T19:15:08.133",
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"lastModified": "2024-11-21T06:46:56.033",
"vulnStatus": "Modified",
Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00
"cveTags": [],
bootstrap
2023-04-24 12:24:31 +02:00
"descriptions": [
{
"lang": "en",
"value": "An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash."
},
{
"lang": "es",
"value": "Un atacante remoto autentificado puede obtener acceso a un puntero desreferenciado contenido en una solicitud. Los accesos pueden llevar posteriormente a la sobreescritura local de la memoria en el CmpTraceMgr, por lo que el atacante no puede obtener los valores le\u00eddos internamente ni controlar los valores a escribir. Si se accede a una memoria no v\u00e1lida, se produce un fallo"
}
],
"metrics": {
"cvssMetricV31": [
{
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"source": "info@cert.vde.com",
"type": "Secondary",
bootstrap
2023-04-24 12:24:31 +02:00
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"baseScore": 7.1,
"baseSeverity": "HIGH",
bootstrap
2023-04-24 12:24:31 +02:00
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"availabilityImpact": "HIGH"
bootstrap
2023-04-24 12:24:31 +02:00
},
"exploitabilityScore": 2.8,
"impactScore": 4.2
},
{
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"source": "nvd@nist.gov",
"type": "Primary",
bootstrap
2023-04-24 12:24:31 +02:00
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"baseScore": 7.1,
"baseSeverity": "HIGH",
bootstrap
2023-04-24 12:24:31 +02:00
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"availabilityImpact": "HIGH"
bootstrap
2023-04-24 12:24:31 +02:00
},
"exploitabilityScore": 2.8,
"impactScore": 4.2
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:P",
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"baseScore": 4.9,
bootstrap
2023-04-24 12:24:31 +02:00
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "SINGLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
"availabilityImpact": "PARTIAL"
bootstrap
2023-04-24 12:24:31 +02:00
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.8,
"impactScore": 4.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "info@cert.vde.com",
Auto-Update: 2024-12-15T03:00:19.262894+00:00
2024-12-15 03:03:56 +00:00
"type": "Primary",
bootstrap
2023-04-24 12:24:31 +02:00
"description": [
{
"lang": "en",
"value": "CWE-822"
}
]
},
{
"source": "nvd@nist.gov",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "5C0588BE-2046-48F8-95E9-338FB009E2FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "45FF3C0B-9043-4E82-A8F3-95CB79D8DAA1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "4CB8984E-ED1F-4F52-B016-F08C0D085C64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "412EBC80-0D9C-419F-9DC3-E2054A8B93B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "AB585AB5-D0AC-46DC-9723-A0FEFBFB015C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "4F6E2A1D-0187-4C71-A87D-48B3EC3D99DD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "A78E493B-6D9E-4196-830C-24BCF25D3D44"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "F66AAE46-CCF8-46D6-89AD-5A4461FCECE9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "9D5DE9D1-C334-452C-A64B-D74A48017B6D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "AB1C57CE-152A-44AE-98B8-39E310255C8E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "01A94C91-B155-4A5A-9F0B-F7E04F3B23B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_rte_sl_\\(for_beckhoff_cx\\):*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "95BC26CF-75EE-43A2-8A92-E877CAF612F3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "1D85A5BC-ADB6-40E4-9434-B57C99185BBA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "AC013B85-98C0-4EF0-844C-4C75D1D237D9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.0",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "25737EE6-531E-4241-AA40-856388A2E333"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "780B6607-72A7-487E-A180-5C9A49BF6355"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*",
"versionEndExcluding": "4.5.0.0",
"matchCriteriaId": "E36291AE-21CB-4ECB-8816-D50712C70E30"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "E9F1B30B-6D52-40B1-ABD3-5164A76F5447"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "5C264A88-C41C-400B-9C69-0DBB1CEB9DF9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "60E8930A-4C6C-41CE-8BA8-97332DC753FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.5.18.0",
"matchCriteriaId": "879A9478-54E4-4B6E-A6DC-6DDE1C5E7745"
}
]
}
]
}
],
"references": [
{
"url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17093&token=15cd8424832ea10dcd4873a409a09a539ee381ca&download=",
"source": "info@cert.vde.com",
"tags": [
"Vendor Advisory"
]
Auto-Update: 2024-11-23T15:09:04.070866+00:00
2024-11-23 15:12:23 +00:00
},
{
"url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17093&token=15cd8424832ea10dcd4873a409a09a539ee381ca&download=",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
bootstrap
2023-04-24 12:24:31 +02:00
}
]
}
Reference in New Issue Copy Permalink