CVE-2022-22514

Published Apr 7, 2022

Last updated 3 months ago

Overview

Description
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
Source
info@cert.vde.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
7.1
Impact score
4.2
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
4.9
Impact score
4.9
Exploitability score
6.8
Vector string
AV:N/AC:M/Au:S/C:N/I:P/A:P

Weaknesses

info@cert.vde.com
CWE-822
nvd@nist.gov
CWE-119

Social media

Hype score
Not currently trending

Configurations