René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

100 lines
3.1 KiB
JSON

{
"id": "CVE-2022-3575",
"sourceIdentifier": "info@cert.vde.com",
"published": "2022-11-02T17:15:18.673",
"lastModified": "2022-11-05T00:30:26.960",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "info@cert.vde.com",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "info@cert.vde.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:2.8.0:*:*:*:*:fadc_r2:*:*",
"matchCriteriaId": "F46EB758-1260-40FB-A5D5-87C11CA5964B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:2.8.0:*:*:*:*:fadci_r2:*:*",
"matchCriteriaId": "ADB27623-E59D-4062-90AB-7787624971B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:2.9.0:*:*:*:*:fadc_r2:*:*",
"matchCriteriaId": "A66B5545-5CF4-4CD2-93BA-D77D5A889DD6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:2.9.0:*:*:*:*:fadci_r2:*:*",
"matchCriteriaId": "FC2D7FAF-C89C-49DC-B85A-BD36E4B7B9A6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:2.9.1:*:*:*:*:fadc_r2:*:*",
"matchCriteriaId": "27810BDA-FED1-48CD-B3D8-6B60C0B9195C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:2.9.1:*:*:*:*:fadci_r2:*:*",
"matchCriteriaId": "F32CAEB4-0CCD-463D-AAFE-88AD4FF6D3EB"
}
]
}
]
}
],
"references": [
{
"url": "https://www.frauscher.com/en/psirt",
"source": "info@cert.vde.com",
"tags": [
"Vendor Advisory"
]
}
]
}