PT-2022-19883 · Amb1 Sdk · Amb1 Sdk

Chiba · Published 2022-04-27 · Updated 2022-12-13 · CVE-2022-29859

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions amb1 sdk versions prior to 2022-03-11

Description The issue is related to the mishandling of data structures for DHCP packet data in the dhcps.c file within the amb1 sdk.

Recommendations For versions prior to 2022-03-11, update to a version released after 2022-03-11 to resolve the issue.

Fix

Related Identifiers

CVE-2022-29859

Affected Products

Amb1 Sdk

References · 6

• https://github.com/ambiot/amb1_sdk/commit/4b73f58f32914d0081d79a79e53a3215c8c1ea56 · Patch
• https://osv.dev/vulnerability/CVE-2022-29859 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29859 · Security Note
• https://t.me/cvenotify/29829 · Telegram Post
• https://t.me/cibsecurity/41543 · Telegram Post
• https://amebaiot.com/zh/security_bulletin/cve-2022-29859 · Note