PT-2022-5484 · Unknown · Vport P16-1Mp-M12+1

Published 2022-11-11 · Updated 2022-11-11 · CVE-2022-38157

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions VPort P16-1MP-M12, VPort P16-1MP-M12-IR, VPort P06-1MP-M12 (affected versions not specified)

Description The issue is related to the use of uncontrolled format strings in the RTSP service of the IP camera microprogram. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

BDU:2022-06813

CVE-2022-38157

Affected Products

Vport P06-1Mp-M12

Vport P16-1Mp-M12

References · 2

• https://bdu.fstec.ru/vul/2022-06813 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/moxa-vport-series-improper-input-validation-vulnerability · Note