PT-2023-14913 · Blackbox · Black Box Kvm Firmware

Ferhat Çil · Publicado 2023-01-10 · Atualizado 2026-05-02 · CVE-2022-4636

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Black Box KVM Firmware version 3.4.31307

Description The issue allows an attacker to perform path traversal, potentially leading to the theft of user credentials and other sensitive information through local file inclusion.

Recommendations For Black Box KVM Firmware version 3.4.31307, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2022-4636

Produtos afetados

Black Box Kvm Firmware

Referências · 5

• https://osv.dev/vulnerability/CVE-2022-4636 · Aviso do Fabricante
• https://t.me/cvenotify/42146 · Publicação no Telegram
• https://twitter.com/HackWithJyte/status/2050630044595151272 · Publicação no Twitter
• https://cisa.gov/uscert/ics/advisories/icsa-23-010-01 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2022-4636 · Nota de Segurança