Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ws local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1205990
CVE ID: CVE-2022-45154 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-18T19:24:37.461Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: SUSE Products: SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 Problem Types: CWE-312 Description: A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3 allows attackers that get access to the support logs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version
ogs to gain knowledge of the stored credentials This issue affects: SUSE Linux Enterprise Server 12 supportutils version 3.0.10-95.51.1CWE-312: Cleartext Storage of Sensitive Information and prior versions. SUSE Linux Enterprise Server 15 supportutils version 3.1.21-150000.5.44.1 and prior versions. SUSE Linux Enterprise Server 15 SP3 supportutils version 3.1.21-150300.7.35.15.1 and prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1207598
CVE ID: CVE-2022-45155 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T15:00:44.219Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: SUSE Products: openSUSE Factory Problem Types: CWE-755 Description: An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-go_modules versions prior to 0.6.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/s
1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1201138
CVE ID: CVE-2022-45157 State: PUBLISHED Published: 2024-11-13T13:39:10.338Z Last Updated: 2024-11-13T14:39:15.785Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: SUSE Products: rancher Problem Types: CWE-522 Description: A vulnerability has been identified in the way that Rancher stores vSphere's CPI (Cloud Provider Interface) and CSI (Container Storage Interface) credentials used to deploy clusters through the vSphere cloud provider. This issue leads to the vSphere CPI and CSI passwords being stored in a plaintext object inside Rancher. This vulnerability is only applicable to users that deploy clusters in vSphere environments. Additional Analyst Notes:
This vulnerability is only applicable to users that deploy clusters in vSphere environments. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2022-45157 - https://github.com/rancher/rancher/security/advisories/GHSA-xj7w-r753-vj8v
CVE ID: CVE-2022-45163 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-30T14:38:50.059Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:P/A:N/C:H/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device security-enabled configuration, memory contents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks.
ents could potentially leak to physically proximate attackers via the respective SDP port in cold and warm boot attacks. (The recommended mitigation is to completely disable the SDP mode by programming a one-time programmable eFUSE. Customers can contact NXP for additional information.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://research.nccgroup.com/category/technical-advisory/ - https://nxp.com - https://research.nccgroup.com/2022/11/17/cve-2022-45163/
CVE ID: CVE-2022-45164 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-30T16:02:11.149Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to cancel (delete) a booking, created by someone else - even if this basic user is not a member of the booking Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-45164/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45164
CVE ID: CVE-2022-45165 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-30T16:02:24.953Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create an SQL query. It causes this service to be prone to SQL injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-45165/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45165
CVE ID: CVE-2022-45166 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-30T16:02:15.041Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-45166/ - https://cds.thalesgroup.com/en/tc
ment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-45166/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45166
CVE ID: CVE-2022-45167 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-05-30T16:02:27.557Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://excellium-services.com/cert-xlm-advisory/CVE-2022-45167/ - https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-45167
CVE ID: CVE-2022-45168 State: PUBLISHED Published: 2024-06-10T00:00:00.000Z Last Updated: 2025-03-20T20:34:58.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes before checking the TOTP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45169 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-10-30T13:45:09.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v031. A URL Redirection to an Untrusted Site (Open Redirect) can occur under the /api/v1/notification/createnotification endpoint, allowing an authenticated user to send an arbitrary push notification to any other user of the system. This push notification can include an (invisible) clickable link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45170 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T16:31:47.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/file endpoint. A malicious user, logged into a victim's account, is able to decipher a file without knowing the key set by the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45171 State: PUBLISHED Published: 2024-05-28T19:23:45.738Z Last Updated: 2025-02-13T15:46:35.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site section. A remote user, authenticated to the product, can arbitrarily upload potentially dangerous files without restrictions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45172 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T18:35:10.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/registration/validateEmail endpoint, the /api/v1/vdeskintegration/user/adduser endpoint, and the /api/v1/registration/changePasswordUser endpoint. The web application is affected by flaws in authorization logic, through which a malicious user (with no privileges) is able to perform privilege escalation to the administrator role, and steal the accounts of any users on the system. Additional Analyst Notes:
lege escalation to the administrator role, and steal the accounts of any users on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45173 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T16:33:01.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /api/v1/vdeskintegration/challenge endpoint. Because only the client-side verifies whether a check was successful, an attacker can modify the response, and fool the application into concluding that the TOTP was correct. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45174 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T16:33:57.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication for SAML Users can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/challenge endpoint. The correctness of the TOTP is not checked properly, and can be bypassed by passing any string as the backup code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45175 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T16:35:41.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under the 5.6.5-3/doc/{ID-FILE]/c/{N]/{C]/websocket endpoint. A malicious unauthenticated user can access cached files in the OnlyOffice backend of other users by guessing the file ID of a target file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45176 State: PUBLISHED Published: 2024-06-10T00:00:00 Last Updated: 2024-08-19T15:05:26.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under the /api/v1/getbodyfile endpoint via the uri parameter. The web application (through its vShare functionality section) doesn't properly check parameters, sent in HTTP requests as input, before saving them on the server. In addition, crafted JavaScript content can then be reflected back to the end user and executed by the web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
e end user and executed by the web browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45177 State: PUBLISHED Published: 2024-02-21T00:00:00 Last Updated: 2024-08-26T17:03:30.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search={NAME]+{SURNAME] endpoint, and the /login endpoint. The web application provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
e of the intended control sphere. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45178 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T19:33:24.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdeskintegration/saml/user/createorupdate endpoint, the /settings/guest-settings endpoint, the /settings/samlusers-settings endpoint, and the /settings/users-settings endpoint. A malicious user (already logged in as a SAML User) is able to achieve privilege escalation from a low-privilege user (FGM user) to an administrative user (GGU user), including the administrator, or create new users even without an a
user (FGM user) to an administrative user (GGU user), including the administrator, or create new users even without an admin role. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45179 State: PUBLISHED Published: 2024-02-21T00:00:00.000Z Last Updated: 2025-03-28T15:53:43.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v031. A basic XSS vulnerability exists under the /api/v1/vdeskintegration/todo/createorupdate endpoint via the title parameter and /dashboard/reminders. A remote user (authenticated to the product) can store arbitrary HTML code in the reminder section title in order to corrupt the web page (for example, by creating phishing sections to exfiltrate victims' credentials). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - h
trate victims' credentials). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45180 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T20:47:55.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdesk_{DOMAIN]/export endpoint. A malicious user, authenticated to the product without any specific privilege, can use the API for exporting information about all users of the system (an operation intended to only be available to the system administrator). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-45182 State: PUBLISHED Published: 2022-11-11T00:00:00.000Z Last Updated: 2025-05-01T13:37:50.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/1e46533f4051648bc40478d99201f19241bbaa41 - https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/0ad7d00210fc2c0eb7073e5ed429ac265ccfebbd - https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/5aa194df3dfc92cc21f6604bbda32268f4a624ce - https://www.pistar.uk/ - https://github.com/AndyTayl
t/Pi-Star_DV_Dash/commit/5aa194df3dfc92cc21f6604bbda32268f4a624ce - https://www.pistar.uk/ - https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/issues/169
CVE ID: CVE-2022-45183 State: PUBLISHED Published: 2022-11-14T00:00:00 Last Updated: 2024-08-03T14:09:56.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6. Additional Analyst Notes: - CVE Program Container: References: - https://ironmansoftware.com - https://docs.powershelluniversal.com/changelog - https://blog.ironmansoftware.com/psu-2022-11-cve/
CVE ID: CVE-2022-45184 State: PUBLISHED Published: 2022-11-14T00:00:00 Last Updated: 2024-08-03T14:09:56.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7. Additional Analyst Notes: - CVE Program Container: References: - https://ironmansoftware.com - https://docs.powershelluniversal.com/change
Notes: - CVE Program Container: References: - https://ironmansoftware.com - https://docs.powershelluniversal.com/changelog - https://blog.ironmansoftware.com/psu-2022-11-cve/
CVE ID: CVE-2022-45185 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T18:00:17.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.suitecrm.com/admin/releases/7.12.x/ - https://github.com/Orange-Cyberdefense/CVE-repository/ - https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py
CVE ID: CVE-2022-45186 State: PUBLISHED Published: 2025-01-07T00:00:00 Last Updated: 2025-01-08T15:12:24.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.suitecrm.com/admin/releases/7.12.x/ - https://github.com/Orange-Cyberdefense/CVE-repository/ - https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py
CVE ID: CVE-2022-45188 State: PUBLISHED Published: 2022-11-12T00:00:00 Last Updated: 2024-08-03T14:09:56.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides remote root access on some platforms such as FreeBSD (used for TrueNAS). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/netatalk/files/netatalk/ - https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.13.html - https://netatalk.sourceforge.io/3.1/ReleaseNotes3.1.14.html - https://rushbnt.github.io/bug%20analysis/netatalk-0day/ - https://lists
alk.sourceforge.io/3.1/ReleaseNotes3.1.14.html - https://rushbnt.github.io/bug%20analysis/netatalk-0day/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZYWSGVA6WXREMB6PV56HAHKU7R6KPOP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SG6WZW5LXFVH3P7ZVZRGHUVJEMEFKQLI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GEAFLA5L2SHOUFBAGUXIF2TZLGBXGJKT/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00018.html - https://www.debian.org/security/2023/dsa-5503 - https://security.gentoo.org/glsa/202311-02
CVE ID: CVE-2022-45190 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T15:17:15.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blediff.github.io/
CVE ID: CVE-2022-45191 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T17:31:15.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a pair confirm message with wrong values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.microchip.com/en-us/support/product-change-notification
CVE ID: CVE-2022-45192 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T15:13:09.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of service by sending a cleartext encryption pause request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blediff.github.io/
CVE ID: CVE-2022-45193 State: PUBLISHED Published: 2022-11-11T00:00:00.000Z Last Updated: 2025-04-29T14:38:06.112Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:L/AV:L/A:N/C:N/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zigrin.com/advisories/cbrn-analysis-unprotected-storage-of-application-files/