VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
249bc4cebedade5155d8eeefbac7a00eae5d85bc
vuln-cve/data/2022/3xxx/CVE-2022-3686.json
T

192 lines
11 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2022-3686",
"assignerOrgId": "e383dce4-0c27-4495-91c4-0db157728d17",
"state": "PUBLISHED",
"assignerShortName": "Hitachi Energy",
"dateReserved": "2022-10-26T06:03:14.525Z",
"datePublished": "2023-03-28T12:57:11.113Z",
"dateUpdated": "2025-02-18T20:25:39.042Z"
},
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "SDM600",
"vendor": "Hitachi Energy",
"versions": [
{
"status": "unaffected",
"version": "SDM600 1.3"
},
{
"lessThanOrEqual": "SDM600 1.2.*",
"status": "affected",
"version": "SDM600 1.2",
"versionType": "custom"
},
{
"lessThanOrEqual": "SDM600 1.1.*",
"status": "affected",
"version": "SDM600 1.1",
"versionType": "custom"
},
{
"lessThanOrEqual": "SDM600 1.0.*",
"status": "affected",
"version": "SDM600 1.0",
"versionType": "custom"
}
]
}
],
"datePublic": "2023-03-28T12:30:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A vulnerability exists in a SDM600 endpoint.<br>An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive.<br>This issue affects:&nbsp;All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291)<br><br> \n\nList of CPEs:\n\n<br><ul><li>cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.1:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.21000.105:*:*:*:*:*:*:*</li><li>cpe:2.3:a:hitachienergy:sdm600:1.2.23000.291:*:*:*:*:*:*:*</li></ul>"
}
],
"value": "A vulnerability exists in a SDM600 endpoint.\nAn attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive.\nThis issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 (Build Nr. 1.2.23000.291)\n\n \n\nList of CPEs:\n\n\n * cpe:2.3:a:hitachienergy:sdm600:1.0:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.1:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.9002.257:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.10002.257:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.11002.149:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.12002.222:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.13002.72:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.44:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.92:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.108:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.182:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.257:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.342:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.447:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.481:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.506:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.14002.566:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.20000.3174:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.291:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.931:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.21000.105:*:*:*:*:*:*:*\n * cpe:2.3:a:hitachienergy:sdm600:1.2.23000.291:*:*:*:*:*:*:*\n\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-285",
"description": "CWE-285:Improper Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "e383dce4-0c27-4495-91c4-0db157728d17",
"shortName": "Hitachi Energy",
"dateUpdated": "2023-03-28T12:57:11.113Z"
},
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000138&LanguageCode=en&DocumentPartId=&Action=Launch"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The vulnerability is remediated in SDM600 1.3.0.1339.<br>Please update to SDM600 1.3.0.1339 version or apply mitigation as described in the Mitigation Factors/Workarounds Section.<br><br>"
}
],
"value": "The vulnerability is remediated in SDM600 1.3.0.1339.\nPlease update to SDM600 1.3.0.1339 version or apply mitigation as described in the Mitigation Factors/Workarounds Section.\n\n"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "SDM600 API permission check",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section."
}
],
"value": "Apply mitigation as described in the cybersecurity advisory Mitigation Factors/Workarounds Section."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
},
"adp": [
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-03T01:14:03.374Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000138&LanguageCode=en&DocumentPartId=&Action=Launch",
"tags": [
"x_transferred"
]
}
]
},
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2025-02-18T20:25:28.136869Z",
"id": "CVE-2022-3686",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-02-18T20:25:39.042Z"
}
}
]
}
}
View Git Blame Copy Permalink