PT-2022-24412 · Cms8000 · Cms8000

Published 2022-09-13 · Updated 2022-09-14 · CVE-2022-38453

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CMS8000 device (affected versions not specified)

Description The issue concerns the compilation settings of multiple binary application files on the CMS8000 device. These files are compiled with 'not stripped' and 'debug info' settings, which makes it easier for a threat actor to reverse engineer sensitive code and identify additional vulnerabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-489

Related Identifiers

CVE-2022-38453

Affected Products

Cms8000

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-38453 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsma-22-244-01 · Note
• https://t.me/cibsecurity/49649 · Telegram Post