CVE-2022-39186mediumCWE-732

CVE-2022-39186: medium-severity vulnerability in EXFO BV-10 Performance Endpoint Unit

EXFO - BV-10 Performance Endpoint Unit Misconfiguration

Published · Updated

Follow this CVE+ Monitor BV-10 Performance Endpoint Unit

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.2epss 0.2%
EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
EXFO · BV-10 Performance Endpoint Unit
Related CVEs — EXFO BV-10 Performance Endpoint Unit

In the same product, most dangerous first.

CVE-2022-39184CRITICALEXFO - BV-10 Performance Endpoint Unit Authentication bypassEPSS 0.8%CVE-2022-39185CRITICALEXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.EPSS 0.6%