Lucene search
PRIOn knowledge basePRION:CVE-2022-38625HistoryAug 29, 2022 - 11:15 p.m.
Privilege escalation
2022-08-2923:15:00
PRIOn knowledge base
www.prio-n.com
1
firmware validation
patlite nh-fb
privilege escalation
custom-built firmware
malicious code
DISPUTED Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor’s position is that this is a design choice, not a vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nbm-d88n_firmware | le | 1.46 | |
| nhl-3fb1_firmware | le | 1.46 | |
| nhl-3fv1n_firmware | le | 1.46 |
Related
nvd
nvd
CVE-2022-38625
2022-08-29 23:15:08
cvelist
cvelist
CVE-2022-38625
2022-08-29 22:46:15
cve
cve
CVE-2022-38625
2022-08-29 23:15:08