cvelistv5 - CVE-2022-35733

CVE-2022-35733

Vulnerability from cvelistv5

Published

2022-08-23 01:35

Modified

2024-08-03 09:44

Severity ?

Summary

Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.

References

▼	URL	Tags
	vultures@jpcert.or.jp	http://www.unimo.co.jp/table_notice/index.php?act=1&resid=1643590226-637355	Vendor Advisory
	vultures@jpcert.or.jp	https://jvn.jp/en/vu/JVNVU90821877/index.html	Third Party Advisory

Impacted products

▼	Vendor	Product
	UNIMO Technology Co., Ltd	UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T09:44:21.661Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU90821877/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016",
          "vendor": "UNIMO Technology Co., Ltd",
          "versions": [
            {
              "status": "affected",
              "version": "UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Missing Authentication for Critical Function",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-23T01:35:12",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jvn.jp/en/vu/JVNVU90821877/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2022-35733",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "UNIMO Technology Co., Ltd"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Missing Authentication for Critical Function"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355",
              "refsource": "MISC",
              "url": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355"
            },
            {
              "name": "https://jvn.jp/en/vu/JVNVU90821877/index.html",
              "refsource": "MISC",
              "url": "https://jvn.jp/en/vu/JVNVU90821877/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2022-35733",
    "datePublished": "2022-08-23T01:35:12",
    "dateReserved": "2022-08-08T00:00:00",
    "dateUpdated": "2024-08-03T09:44:21.661Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-35733\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2022-08-23T02:15:07.503\",\"lastModified\":\"2022-08-26T13:17:34.277\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.\"},{\"lang\":\"es\",\"value\":\"Una falta de autenticaci\u00f3n para la vulnerabilidad de la funci\u00f3n cr\u00edtica en los grabadores de v\u00eddeo digital de UNIMO Technology (versiones de firmware UDR-JA1004/JA1008/JA1016 versiones v1.0.20.13 y anteriores, y versiones de firmware UDR-JA1016 v2.0.20.13 y anteriores) permite a un atacante remoto no autenticado ejecutar un comando arbitrario del Sistema Operativo mediante el env\u00edo de una petici\u00f3n especialmente dise\u00f1ada a la interfaz web del dispositivo afectado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:unimo:udr-ja1004:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD4FF086-3812-43FF-86A3-6A464612AEE0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:unimo:udr-ja1004_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.0.20.13\",\"matchCriteriaId\":\"7EBDB7B7-0B10-46EB-BE94-9AF036778D81\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:unimo:udr-ja1008:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6574581-471F-4812-8FFE-F41923C5B7EB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:unimo:udr-ja1008_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.0.20.13\",\"matchCriteriaId\":\"B92067E5-4411-4A8B-BD49-F5937EA16089\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:unimo:udr-ja1016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62CF8836-F7F4-43CB-BA04-FF506DFB53F9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:unimo:udr-ja1016_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.0.20.13\",\"matchCriteriaId\":\"799CC776-530D-4CD6-B7EE-C8A6963A6E7B\"}]}]}],\"references\":[{\"url\":\"http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://jvn.jp/en/vu/JVNVU90821877/index.html\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Third Party Advisory\"]}]}}"
  }
}

gsd-2022-35733

Vulnerability from gsd

Modified

2023-12-13 01:19

Details

Aliases

CVE-2022-35733

Aliases

CVE-2022-35733

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-35733",
    "description": "Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.",
    "id": "GSD-2022-35733"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-35733"
      ],
      "details": "Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.",
      "id": "GSD-2022-35733",
      "modified": "2023-12-13T01:19:33.763240Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "vultures@jpcert.or.jp",
        "ID": "CVE-2022-35733",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "UNIMO Technology Co., Ltd"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Missing Authentication for Critical Function"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355",
            "refsource": "MISC",
            "url": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355"
          },
          {
            "name": "https://jvn.jp/en/vu/JVNVU90821877/index.html",
            "refsource": "MISC",
            "url": "https://jvn.jp/en/vu/JVNVU90821877/index.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:unimo:udr-ja1004_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "1.0.20.13",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:unimo:udr-ja1004:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:unimo:udr-ja1008_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "1.0.20.13",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:unimo:udr-ja1008:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:unimo:udr-ja1016_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "2.0.20.13",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:unimo:udr-ja1016:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2022-35733"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-306"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355"
            },
            {
              "name": "https://jvn.jp/en/vu/JVNVU90821877/index.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://jvn.jp/en/vu/JVNVU90821877/index.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-08-26T13:17Z",
      "publishedDate": "2022-08-23T02:15Z"
    }
  }
}

CVE-2022-35733

Vulnerability from jvndb

Published

2022-08-23 14:31

Modified

2024-06-14 10:24

Severity ?

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

UNIMO Technology digital video recorders vulnerable to missing authentication for critical functions

Details

Multiple digital video recorders provided by UNIMO Technology Co., Ltd do not perform authentication for some critical functions (CWE-306) in the device management web interface. The reporter states that attacks exploiting this vulnerability have been observed. Yoshiki Mori, Ushimaru Hayato and Masaki Kubo of National Institute of Information and Communications Technology Cybersecurity Research Institute reported this vulnerability to the developer and coordinated. After coordination was completed, this case was reported to JPCERT/CC and JPCERT/CC coordinated with the developer for the publication.

References

▼	Type	URL
	JVN	http://jvn.jp/en/vu/JVNVU90821877/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2022-35733
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-35733
	Missing Authentication for Critical Function(CWE-306)	https://cwe.mitre.org/data/definitions/306.html

Impacted products

▼	Vendor	Product
	UNIMO Technology Co., Ltd	UDR-JA1004 firmware
	UNIMO Technology Co., Ltd	UDR-JA1008 firmware
	UNIMO Technology Co., Ltd	UDR-JA1016 firmware

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-002337.html",
  "dc:date": "2024-06-14T10:24+09:00",
  "dcterms:issued": "2022-08-23T14:31+09:00",
  "dcterms:modified": "2024-06-14T10:24+09:00",
  "description": "Multiple digital video recorders provided by UNIMO Technology Co., Ltd do not perform authentication for some critical functions (CWE-306) in the device management web interface.\r\n\r\nThe reporter states that attacks exploiting this vulnerability have been observed.\r\n\r\nYoshiki Mori, Ushimaru Hayato and Masaki Kubo of National Institute of Information and Communications Technology Cybersecurity Research Institute reported this vulnerability to the developer and coordinated. After coordination was completed, this case was reported to JPCERT/CC and JPCERT/CC coordinated with the developer for the publication.",
  "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-002337.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:unimo:udr-ja1004_firmware",
      "@product": "UDR-JA1004 firmware",
      "@vendor": "UNIMO Technology Co., Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:unimo:udr-ja1008_firmware",
      "@product": "UDR-JA1008 firmware",
      "@vendor": "UNIMO Technology Co., Ltd",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:unimo:udr-ja1016_firmware",
      "@product": "UDR-JA1016 firmware",
      "@vendor": "UNIMO Technology Co., Ltd",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.8",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2022-002337",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/vu/JVNVU90821877/index.html",
      "@id": "JVNVU#90821877",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-35733",
      "@id": "CVE-2022-35733",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-35733",
      "@id": "CVE-2022-35733",
      "@source": "NVD"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/306.html",
      "@id": "CWE-306",
      "@title": "Missing Authentication for Critical Function(CWE-306)"
    }
  ],
  "title": "UNIMO Technology digital video recorders vulnerable to missing authentication for critical functions"
}

ghsa-qrqm-fhg8-7274

Vulnerability from github

Published

2022-08-24 00:00

Modified

2022-08-27 00:00

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-35733"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-306"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-08-23T02:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.",
  "id": "GHSA-qrqm-fhg8-7274",
  "modified": "2022-08-27T00:00:53Z",
  "published": "2022-08-24T00:00:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35733"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/vu/JVNVU90821877/index.html"
    },
    {
      "type": "WEB",
      "url": "http://www.unimo.co.jp/table_notice/index.php?act=1\u0026resid=1643590226-637355"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2022-35733

Vulnerability from cvelistv5

gsd-2022-35733

Vulnerability from gsd

CVE-2022-35733

Vulnerability from jvndb

ghsa-qrqm-fhg8-7274

Vulnerability from github

Tags

Sightings

Nomenclature