CVE-2022-31765
high-risk
Published 2022-10-11
Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges.
Do I need to act?
-
0.38% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10
High
NETWORK
/ LOW complexity
Affected Products (20)
6Gk6108-4Am00-2Ba2 Firmware
6Gk6108-4Am00-2Da2 Firmware
6Gk5804-0Ap00-2Aa2 Firmware
6Gk5812-1Aa00-2Aa2 Firmware
6Gk5812-1Ba00-2Aa2 Firmware
6Gk5816-1Aa00-2Aa2 Firmware
6Gk5816-1Ba00-2Aa2 Firmware
6Gk5826-2Ab00-2Ab2 Firmware
6Gk5874-2Aa00-2Aa2 Firmware
6Gk5874-3Aa00-2Aa2 Firmware
6Gk5876-3Aa02-2Ba2 Firmware
6Gk5876-3Aa02-2Ea2 Firmware
6Gk5876-4Aa00-2Ba2 Firmware
6Gk5876-4Aa00-2Da2 Firmware
6Gk5853-2Ea00-2Da1 Firmware
6Gk5856-2Ea00-3Da1 Firmware
6Gk5856-2Ea00-3Aa1 Firmware
6Gk5622-2Gs00-2Ac2 Firmware
6Gk5632-2Gs00-2Ac2 Firmware
6Gk5636-2Gs00-2Ac2 Firmware
Affected Vendors
References (2)
64
/ 100
high-risk
Severity
30/34 · Critical
Exploitability
1/34 · Minimal
Exposure
33/34 · Critical