Lucene search

K
nvd[email protected]NVD:CVE-2022-48615
HistoryDec 12, 2023 - 8:15 a.m.

CVE-2022-48615

2023-12-1208:15:06
CWE-284
web.nvd.nist.gov
huawei
access control vulnerability
datacom product
device information
exploit

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

0.0005 Low

EPSS

Percentile

16.0%

An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial device information.

Affected configurations

NVD
Node
huaweiar617vwMatch-
AND
huaweiar617vw_firmwareMatchv300r21c00spc200

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

0.0005 Low

EPSS

Percentile

16.0%

Related for NVD:CVE-2022-48615