admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-06-07 13:36:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2022/CVE-2022-303xx/CVE-2022-30310.json

362 lines
10 KiB
JSON
Raw Normal View History

bootstrap
2023-04-24 12:24:31 +02:00
{
"id": "CVE-2022-30310",
"sourceIdentifier": "info@cert.vde.com",
"published": "2022-06-13T14:15:09.227",
Auto-Update: 2023-07-21T18:00:40.742452+00:00
2023-07-21 18:00:44 +00:00
"lastModified": "2023-07-21T16:56:15.323",
bootstrap
2023-04-24 12:24:31 +02:00
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint \"cecc-x-acknerr-request\" POST request doesn\u00e2\u20ac\u2122t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection."
},
{
"lang": "es",
"value": "En la familia de productos CECC-X-M1 de Festo en varias versiones, la petici\u00f3n POST del endpoint http \"cecc-x-acknerr-request\" no comprueba la sintaxis del puerto. Esto puede resultar en una ejecuci\u00f3n no autorizada de comandos del sistema con privilegios de root debido a una inyecci\u00f3n de comandos de control de acceso inapropiados"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "info@cert.vde.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
Auto-Update: 2023-07-21T18:00:40.742452+00:00
2023-07-21 18:00:44 +00:00
"source": "nvd@nist.gov",
bootstrap
2023-04-24 12:24:31 +02:00
"type": "Primary",
"description": [
Auto-Update: 2023-07-21T18:00:40.742452+00:00
2023-07-21 18:00:44 +00:00
{
"lang": "en",
"value": "CWE-78"
},
bootstrap
2023-04-24 12:24:31 +02:00
{
"lang": "en",
"value": "CWE-863"
}
]
},
{
Auto-Update: 2023-07-21T18:00:40.742452+00:00
2023-07-21 18:00:44 +00:00
"source": "info@cert.vde.com",
bootstrap
2023-04-24 12:24:31 +02:00
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-863"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "F146DE3D-9970-4732-9ECC-7562902BD228"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1_firmware:4.0.14:*:*:*:*:*:*:*",
"matchCriteriaId": "F2DB1CA3-3E7A-4643-9654-CA5CB83FEF32"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:controller_cecc-x-m1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "65A6F168-897E-4300-9C87-B987EA538473"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1-mv_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "C3E5C5DE-4CB0-4C9D-BCFD-BCC45BF46038"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1-mv_firmware:4.0.14:*:*:*:*:*:*:*",
"matchCriteriaId": "DD5E3B15-B678-4B06-B6CC-03A5216A21C7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:controller_cecc-x-m1-mv:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DE2D43FB-F307-4F7E-8DEF-F026ACE110CF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1-mv-s1_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "EC667C12-0861-4B84-B728-0F200644FCE2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1-mv-s1_firmware:4.0.14:*:*:*:*:*:*:*",
"matchCriteriaId": "4121C15B-B880-468E-B9F0-7C8073AB3411"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:controller_cecc-x-m1-mv-s1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6AA08A0C-ADD6-4683-90E8-21D537E1E19B"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1-ys-l1_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "390BAAB8-93B3-40DE-B198-EA203A61DB39"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:controller_cecc-x-m1-ys-l1:-:*:*:*:*:*:*:*",
"matchCriteriaId": "81C720A3-8847-487A-917C-E9863ABC8690"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1-ys-l2_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "B0611087-C956-4F88-8238-AAE3F9AA12DC"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:controller_cecc-x-m1-ys-l2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C95A7B4C-C5BA-4C57-96A2-BB435ADE1ED8"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:controller_cecc-x-m1-y-yjkp_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "ECC3B011-E51F-4E33-84AD-7D85899D20BA"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:controller_cecc-x-m1-y-yjkp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C7F3C797-DE05-4FBC-A3BE-08548B746374"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:servo_press_kit_yjkp_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "8A787347-8CA6-4A3F-88FE-7086C0BDE2D3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:servo_press_kit_yjkp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8D75AC25-3E04-49B0-B727-060933EC006D"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:festo:servo_press_kit_yjkp-_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "3.8.14",
"matchCriteriaId": "54931207-EBF7-4E8D-B480-48FA17AE94B0"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:festo:servo_press_kit_yjkp-:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A390CCD1-9EAD-4021-9816-D4508B72467F"
}
]
}
]
}
],
"references": [
{
"url": "https://cert.vde.com/en/advisories/VDE-2022-020/",
"source": "info@cert.vde.com",
"tags": [
"Vendor Advisory"
]
}
]
}
Reference in New Issue Copy Permalink