PT-2023-14417 · Unknown · Fc46-Webbridge

Published 2023-01-17 · Updated 2023-01-30 · CVE-2022-43975

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FC46-WebBridge versions prior to 3.7.6.25p0 3.2.2.17p0 4.7p0

Description An issue in the web server of FC46-WebBridge allows arbitrary files and configurations to be read via directory traversal over TCP port 8888.

Recommendations For versions prior to 3.7.6.25p0 3.2.2.17p0 4.7p0, update to version 3.7.6.25p0 3.2.2.17p0 4.7p0 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 8888 to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-43975

Affected Products

Fc46-Webbridge

References · 4

• https://osv.dev/vulnerability/CVE-2022-43975 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43975 · Security Note
• https://t.me/cvenotify/43108 · Telegram Post
• https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json · Note