PT-2022-26749 · Media5 · Mediatrix 4102

Daniel Wong · CVE-2022-43096 · Published 2022-11-17 · Updated 2022-11-22

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mediatrix 4102 versions prior to 48.5.2718

Description The issue allows local attackers to gain root access via the UART port.

Recommendations For versions prior to 48.5.2718, update to version 48.5.2718 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-1191

Related Identifiers

CVE-2022-43096

Affected Products

Mediatrix 4102

References · 6

• 🔥 https://github.com/ProxyStaffy/Mediatrix-CVE-2022-43096 · Exploit
• https://documentation.media5corp.com/display/MP/DGW+Security+Improvement+Notes+v48.5.2718 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-43096 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43096 · Security Note
• https://t.me/cibsecurity/53135 · Telegram Post
• https://t.me/cvenotify/38184 · Telegram Post