Lucene search

TR-CERTCVE-2022-24037

HistoryNov 18, 2022 - 8:15 a.m.

CVE-2022-24037

2022-11-1808:15:09

CWE-20

TR-CERT

web.nvd.nist.gov

cve-2022-24037

karmasis

infraskope

siem

unauthenticated access

vulnerability

nvd.

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

AI Score

7.9

Confidence

High

EPSS

0.003

Percentile

68.3%

JSON

Karmasis Informatics Infraskope SIEM+

has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.

Affected configurations

Nvd

Node

karmasisinfraskope_siem\+Range<7.10.00

VendorProductVersionCPE
karmasisinfraskope_siem\+*cpe:2.3:a:karmasis:infraskope_siem\+:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
karmasis	infraskope_siem\+	*	cpe:2.3:a:karmasis:infraskope_siem\+::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Infraskope SIEM+",
    "vendor": "Karmasis Informatics",
    "versions": [
      {
        "lessThan": "7.10.xx",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

karmasis.com/urunlerimiz/infraskope-siem/

www.usom.gov.tr/bildirim/tr-22-0691

Social References

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

AI Score

7.9

Confidence

High

EPSS

0.003

Percentile

68.3%

JSON

Related for CVE-2022-24037