CVE-2022-32284

Katalog CVE

CVSS 7.5 · High EPSS 3,4%

Kerentanan Use of Insufficiently Random Values pada yokogawa aw810d firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, which may allow a remote attacker to cause denial-of-service (DoS) condition by sending a specially crafted packet.

Rincian

Terbit di NVD

4 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-330: Use of Insufficiently Random Values

EPSS (30 hari)

3,4% peluang dieksploitasi; lebih tinggi dari 88,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://web-material3.yokogawa.com/1/32825/files/YSAR-22-0005-E.pdf advisory vendor
• https://web-material3.yokogawa.com/19/32825/files/YSAR-22-0005-J.pdf advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-02 advisory pihak ketiga · pemerintah AS
• https://jvn.jp/vu/JVNVU95343906/index.html advisory pihak ketiga · vdb entry