CVE-2022-47949 (GCVE-0-2022-47949)

Vulnerability from cvelistv5 – Published: 2022-12-24 00:00 – Updated: 2025-04-14 18:36
VLAI
Summary
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022.
Severity
9.8 (Critical)
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
SSVC
Exploitation: poc Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-04-14 18:36 UTC
CWE
  • n/a
  • CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:02:36.549Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/PabloMK7/ENLBufferPwn"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47949",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T18:36:31.417550Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-14T18:36:52.377Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-24T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/PabloMK7/ENLBufferPwn"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-47949",
    "datePublished": "2022-12-24T00:00:00.000Z",
    "dateReserved": "2022-12-24T00:00:00.000Z",
    "dateUpdated": "2025-04-14T18:36:52.377Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-47949",
      "date": "2026-09-29",
      "epss": "0.23147",
      "percentile": "0.97698"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:nintendo:animal_crossing\\:_new_horizons:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "5E76851C-D70A-4134-B250-78B99985B211",
                  "versionEndExcluding": "2.0.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:arms:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A72CE5AE-CF5F-4C5B-8D68-A9FB5ADD0865",
                  "versionEndExcluding": "5.4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:mario_kart_7:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B4666B65-0A4C-4B28-A46E-1968E75CDECC",
                  "versionEndExcluding": "1.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:mario_kart_8:*:*:*:*:deluxe:*:*:*",
                  "matchCriteriaId": "38F8B32D-954B-462D-993B-26B87A7C7F5A",
                  "versionEndExcluding": "2.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:mario_kart_8:-:*:*:*:-:*:*:*",
                  "matchCriteriaId": "19EA5E13-D11B-4573-B089-331124B7B698",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:splatoon:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7BC0FC2B-E2B4-4652-AED5-4481DE5F3A4C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:splatoon_2:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B039788D-56ED-4309-A374-D11680FAAFD4",
                  "versionEndExcluding": "5.5.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:splatoon_3:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "76E2F213-1EB5-4781-9955-D45556F093E6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:super_mario_maker_2:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "736316DF-6291-4310-8FB5-F346F4DE2A7E",
                  "versionEndExcluding": "3.0.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:nintendo:switch_sports:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "55E863A6-6B3B-42C0-B70D-97D13EB23630",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022."
        },
        {
          "lang": "es",
          "value": "La clase Nintendo NetworkBuffer, tal como se usa en Animal Crossing: New Horizons anterior a 2.0.6 y otros productos, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un gran paquete UDP que provoca un desbordamiento del b\u00fafer, tambi\u00e9n conocido como ENLBufferPwn. La v\u00edctima deber\u00e1 unirse a una sesi\u00f3n de juego con el atacante. Otros productos afectados incluyen Mario Kart 7 antes de 1.2, Mario Kart 8, Mario Kart 8 Deluxe antes de 2.1.0, ARMS antes de 5.4.1, Splatoon, Splatoon 2 antes de 5.5.1, Splatoon 3 antes de finales de 2022, Super Mario Maker 2 antes de 3.0 .2 y Nintendo Switch Sports antes de finales de 2022."
        }
      ],
      "id": "CVE-2022-47949",
      "lastModified": "2024-11-21T07:32:37.143",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "source": "cve@mitre.org",
            "type": "Secondary"
          },
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2022-12-24T23:15:09.010",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Third Party Advisory"
          ],
          "url": "https://github.com/PabloMK7/ENLBufferPwn"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Third Party Advisory"
          ],
          "url": "https://github.com/PabloMK7/ENLBufferPwn"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-120"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "n/a",
                "vendor": "n/a",
                "versions": [
                  {
                    "status": "affected",
                    "version": "n/a"
                  }
                ]
              }
            ],
            "source": "cve@mitre.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:nintendo:animal_crossing\\:_new_horizons:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5E76851C-D70A-4134-B250-78B99985B211",
                    "versionEndExcluding": "2.0.6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:arms:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A72CE5AE-CF5F-4C5B-8D68-A9FB5ADD0865",
                    "versionEndExcluding": "5.4.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:mario_kart_7:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B4666B65-0A4C-4B28-A46E-1968E75CDECC",
                    "versionEndExcluding": "1.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:mario_kart_8:*:*:*:*:deluxe:*:*:*",
                    "matchCriteriaId": "38F8B32D-954B-462D-993B-26B87A7C7F5A",
                    "versionEndExcluding": "2.1.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:mario_kart_8:-:*:*:*:-:*:*:*",
                    "matchCriteriaId": "19EA5E13-D11B-4573-B089-331124B7B698",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:splatoon:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7BC0FC2B-E2B4-4652-AED5-4481DE5F3A4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:splatoon_2:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B039788D-56ED-4309-A374-D11680FAAFD4",
                    "versionEndExcluding": "5.5.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:splatoon_3:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76E2F213-1EB5-4781-9955-D45556F093E6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:super_mario_maker_2:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "736316DF-6291-4310-8FB5-F346F4DE2A7E",
                    "versionEndExcluding": "3.0.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nintendo:switch_sports:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55E863A6-6B3B-42C0-B70D-97D13EB23630",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022."
          },
          {
            "lang": "es",
            "value": "La clase Nintendo NetworkBuffer, tal como se usa en Animal Crossing: New Horizons anterior a 2.0.6 y otros productos, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un gran paquete UDP que provoca un desbordamiento del b\u00fafer, tambi\u00e9n conocido como ENLBufferPwn. La v\u00edctima deber\u00e1 unirse a una sesi\u00f3n de juego con el atacante. Otros productos afectados incluyen Mario Kart 7 antes de 1.2, Mario Kart 8, Mario Kart 8 Deluxe antes de 2.1.0, ARMS antes de 5.4.1, Splatoon, Splatoon 2 antes de 5.5.1, Splatoon 3 antes de finales de 2022, Super Mario Maker 2 antes de 3.0 .2 y Nintendo Switch Sports antes de finales de 2022."
          }
        ],
        "id": "CVE-2022-47949",
        "lastModified": "2026-06-17T05:14:30.470",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "cve@mitre.org",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2022-47949",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-14T18:36:31.417550Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2022-12-24T23:15:09.010",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://github.com/PabloMK7/ENLBufferPwn"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://github.com/PabloMK7/ENLBufferPwn"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-120"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-120"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-29T02:52:46+00:00",
      "cve": "CVE-2022-47949",
      "id": "CVE-2022-47949",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2022-47949",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-47949.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T15:02:36.549Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://github.com/PabloMK7/ENLBufferPwn"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-47949",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-04-14T18:36:31.417550Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-120",
                    "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-14T17:36:16.978Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-12-24T00:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "url": "https://github.com/PabloMK7/ENLBufferPwn"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2022-47949",
        "datePublished": "2022-12-24T00:00:00.000Z",
        "dateReserved": "2022-12-24T00:00:00.000Z",
        "dateUpdated": "2025-04-14T18:36:52.377Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.