PT-2022-2365 · Flmg-10 · Flmg-10

Published 2022-04-06 · Updated 2022-06-18 · CVE-2022-22259

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FLMG-10 version 10.0.1.0(H100SP22C00)

Description The issue is related to an improper authentication mechanism in the software, which can be exploited to gain control of the victim device. Successful exploitation may allow an attacker to load specially crafted malicious files, potentially leading to full control of the device.

Recommendations For FLMG-10 version 10.0.1.0(H100SP22C00), consider applying security patches or updates as soon as they become available to address the improper authentication vulnerability. As a temporary workaround, restrict access to the device and its related services to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-02699

CVE-2022-22259

Affected Products

Flmg-10

References · 8

• https://osv.dev/vulnerability/CVE-2022-22259 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20220406-01-bdb62b17-en · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02699 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22259 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022040701 · Note
• https://t.me/cibsecurity/44334 · Telegram Post
• https://t.me/cvenotify/31519 · Telegram Post
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20220406-01-bdb62b17-en · Note