PT-2022-27418 · Unknown · Pi-Star Dv Dash

Raadsec · Published 2022-11-11 · Updated 2022-11-16 · CVE-2022-45182

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pi-Star DV Dash (for Pi-Star DV) versions prior to 5aa194d

Description The issue concerns the mishandling of the module parameter.

Recommendations For versions prior to 5aa194d, update to a version that includes the fix for the mishandling of the module parameter. As a temporary workaround, consider restricting access to the module parameter until a patch is available.

Fix

Weakness Enumeration

CWE-233

Related Identifiers

CVE-2022-45182

Affected Products

Pi-Star Dv Dash

References · 9

• https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/0ad7d00210fc2c0eb7073e5ed429ac265ccfebbd · Patch
• https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/5aa194df3dfc92cc21f6604bbda32268f4a624ce · Patch
• https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/1e46533f4051648bc40478d99201f19241bbaa41 · Patch
• https://osv.dev/vulnerability/CVE-2022-45182 · Vendor Advisory
• https://pistar.uk · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45182 · Security Note
• https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/issues/169 · Note
• https://t.me/cvenotify/37561 · Telegram Post
• https://t.me/cvenotify/37875 · Telegram Post