PT-2023-14913 · Blackbox · Black Box Kvm Firmware

Ferhat Çil · Published 2023-01-10 · Updated 2026-05-02 · CVE-2022-4636

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Black Box KVM Firmware version 3.4.31307

Description The issue allows an attacker to perform path traversal, potentially leading to the theft of user credentials and other sensitive information through local file inclusion.

Recommendations For Black Box KVM Firmware version 3.4.31307, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-4636

Affected Products

Black Box Kvm Firmware

References · 5

• https://osv.dev/vulnerability/CVE-2022-4636 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4636 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-23-010-01 · Patch
• https://t.me/cvenotify/42146 · Telegram Post
• https://twitter.com/HackWithJyte/status/2050630044595151272 · Twitter Post