PT-2022-3172 · Unknown · Ovation Ocr400+1

Published 2022-06-22 · Updated 2022-06-22 · CVE-2022-30267

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ovation OCR400 (affected versions not specified) Ovation OCR1100 (affected versions not specified)

Description The issue is related to insufficient data authentication in the embedded software images of the Ovation systems. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For Ovation OCR400, at the moment, there is no information about a newer version that contains a fix for this issue. For Ovation OCR1100, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2022-03852

CVE-2022-30267

Affected Products

Ovation Ocr1100

Ovation Ocr400

References · 3

• https://bdu.fstec.ru/vul/2022-03852 · Security Note
• https://forescout.com/resources/ot-icefall-report · Note
• https://csirt.gob.cl/media/2022/06/9VSA22-00666-01-1.pdf · Note