CVE-2022-3088 — Execution with Unnecessary Privileges in Aig-300 System Image

CWE-250 — Execution with Unnecessary PrivilegesCWE-269 — Improper Privilege ManagementCWE-20 — Improper Input Validation4 documents4 sources
Severity
7.8HIGHNVD
CISA9.8
EPSS
0.0%
top 85.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
77
Moxa Aig-300 System ImageMoxa Da-662c-16-lx System ImageMoxa Uc-2100-w System Image+74 more
Timeline
PublishedNov 28
Latest updateNov 29

Description

UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Im…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages77 packages

▶CVEListV5moxa/uc-8410a_with_debian_9_system_image4.0.2 and 4.1.2
▶CVEListV5moxa/uc-2100_system_image1.0 — 1.12
▶CVEListV5moxa/uc-8100_system_image3.0 — 3.5

🔴Vulnerability Details

2
GHSA
GHSA-pw2f-v4vr-xg8w: UC-8100A-ME-T System Image: Versions v1↗2022-11-29
▶
CVEList
CVE-2022-3088: UC-8100A-ME-T System Image: Versions v1↗2022-11-22
▶

📋Vendor Advisories

1
CISA
Apache ActiveMQ Improper Input Validation Vulnerability↗2022-02-10
▶
CVE-2022-3088 — Execution with Unnecessary Privileges | cvebase