Lucene search

MitreCVE-2022-34110

HistorySep 12, 2022 - 4:15 a.m.

CVE-2022-34110

2022-09-1204:15:12

mitre

web.nvd.nist.gov

cve-2022-34110

micro-star international

msi feature navigator

file download

security vulnerability

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

17.2%

JSON

An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to download arbitrary files regardless of file type or size.

Affected configurations

Nvd

Node

msimicro-star_international_feature_navigatorMatch1.0.1808.0901

VendorProductVersionCPE
msimicro-star_international_feature_navigator1.0.1808.0901cpe:2.3:a:msi:micro-star_international_feature_navigator:1.0.1808.0901:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
msi	micro-star_international_feature_navigator	1.0.1808.0901	cpe:2.3:a:msi:micro-star_international_feature_navigator:1.0.1808.0901:::::::*

References

micro-star.com

msi.com

gainsec.com/2022/08/26/cve-2022-34109-cve-2022-34110-cve-2022-34108/

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

17.2%

JSON

Related for CVE-2022-34110