PT-2022-5483 · Unknown · Vport P16-1Mp-M12+1

Published 2022-11-11 · Updated 2022-11-11 · CVE-2022-31858

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VPort P16-1MP-M12 (affected versions not specified) VPort P16-1MP-M12-IR (affected versions not specified) VPort P06-1MP-M12 (affected versions not specified)

Description The issue is related to a buffer copy without checking the size of the input data in the RTSP service of the IP camera microprogram. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For VPort P16-1MP-M12, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For VPort P16-1MP-M12-IR, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For VPort P06-1MP-M12, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2022-06812

CVE-2022-31858

Affected Products

Vport P06-1Mp-M12

Vport P16-1Mp-M12

References · 2

• https://bdu.fstec.ru/vul/2022-06812 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/moxa-vport-series-improper-input-validation-vulnerability · Note