VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
249bc4cebedade5155d8eeefbac7a00eae5d85bc
vuln-cve/data/2022/3xxx/CVE-2022-3683.json
T

192 lines
11 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2022-3683",
"assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
"state": "PUBLISHED",
"assignerShortName": "Hitachi Energy",
"dateReserved": "2022-10-26T06:02:11.393Z",
"datePublished": "2023-03-28T12:28:37.543Z",
"dateUpdated": "2025-02-18T20:28:27.275Z"
},
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "SDM600",
"vendor": "Hitachi Energy",
"versions": [
{
"status": "unaffected",
"version": "SDM600 1.3"
},
{
"lessThanOrEqual": "SDM600 1.2.*",
"status": "affected",
"version": "SDM600 1.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "SDM600 1.1.*",
"status": "affected",
"version": "SDM600 1.1",
"versionType": "custom"
},
{
"lessThanOrEqual": "SDM600 1.0.*",
"status": "affected",
"version": "SDM600 1.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2023-03-28T12:30:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A vulnerability exists in the SDM600 API web services authorization validation implementation. <br>An attacker who successfully exploits the vulnerability could read data directly from a data store that is not restricted, or insufficiently protected, having access to sensitive data.<br><br>\n\nThis issue affects:&nbsp;All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291)<br><br> \n\nList of CPEs:\n\n<br><ul><li>cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.1:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.21000.105:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.23000.291:*:*:*:*:*:*:*</li></ul><br><br>"
}
],
"value": "A vulnerability exists in the SDM600 API web services authorization validation implementation. \nAn attacker who successfully exploits the vulnerability could read data directly from a data store that is not restricted, or insufficiently protected, having access to sensitive data.\n\n\n\nThis issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291)\n\n \n\nList of CPEs:\n\n\n * cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.1:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.105:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.23000.291:*:*:*:*:*:*:*\n\n\n\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
"shortName": "Hitachi Energy",
"dateUpdated": "2023-03-28T12:28:37.543Z"
},
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000138&LanguageCode=en&DocumentPartId=&Action=Launch"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The vulnerability is remediated in SDM600 1.3.0.1339.<br>Please update to SDM600 1.3.0.1339 version or apply mitigation as described in the Mitigation Factors/Workarounds Section.<br><br>"
}
],
"value": "The vulnerability is remediated in SDM600 1.3.0.1339.\nPlease update to SDM600 1.3.0.1339 version or apply mitigation as described in the Mitigation Factors/Workarounds Section.\n\n"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "SDM600 API web services authorization validation",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section."
}
],
"value": "Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
},
"adp": [
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-03T01:14:03.245Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000138&LanguageCode=en&DocumentPartId=&Action=Launch",
"tags": [
"x_transferred"
]
}
]
},
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2025-02-18T20:28:19.621081Z",
"id": "CVE-2022-3683",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-02-18T20:28:27.275Z"
}
}
]
}
}
View Git Blame Copy Permalink