CVE-2022-40630mediumCWE-384

CVE-2022-40630: falha de média gravidade em Tacitine Firewall

Improper Session Management Vulnerability in Tacitine Firewall

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Firewall

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 1.1%
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Tacitine · Firewall
CVEs relacionadas — Tacitine Firewall

No mesmo produto, das mais perigosas para as menos.

CVE-2022-40628CRITICALRemote Code Execution Vulnerability in Tacitine FirewallEPSS 2.2%CVE-2022-40629HIGHSensitive Information Disclosure Vulnerability in Tacitine FirewallEPSS 1.6%