CVE-2022-40629highCWE-200

CVE-2022-40629: falha de alta gravidade em Tacitine Firewall

Sensitive Information Disclosure Vulnerability in Tacitine Firewall

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Firewall

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.6%
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to view sensitive information on the targeted device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Tacitine · Firewall
CVEs relacionadas — Tacitine Firewall

No mesmo produto, das mais perigosas para as menos.

CVE-2022-40628CRITICALRemote Code Execution Vulnerability in Tacitine FirewallEPSS 2.2%CVE-2022-40630MEDIUMImproper Session Management Vulnerability in Tacitine FirewallEPSS 1.1%