CVE-2022-23382 - Vulnerability Details - OpenCVE

Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Vendors	Products
Hichip	Shenzhen Hichip Vision Technology Firmware

Configuration 1 [-]

cpe:2.3:o:hichip:shenzhen_hichip_vision_technology_firmware:11.4.8.1.1-20170926:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://lackylab.pl/articles/CVE-2022-23382.html

History

Thu, 26 Sep 2024 15:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-400
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-09-11T00:00:00

Updated: 2024-09-26T15:05:12.243Z

Reserved: 2022-01-18T00:00:00

Link: CVE-2022-23382

Vulnrichment

Updated: 2024-08-03T03:43:45.949Z

NVD

Status : Modified

Published: 2023-09-11T15:15:52.553

Modified: 2024-11-21T06:48:29.300

Link: CVE-2022-23382

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hichip:shenzhen_hichip_vision_technology_firmware:11.4.8.1.1-20170926:*:*:*:*:*:*:*", "matchCriteriaId": "AA45D72A-15C1-4A31-92CE-ED2E426ED42E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network."}, {"lang": "es", "value": "El firmware de la c\u00e1mara IP Shenzhen Hichip Vision Technology V11.4.8.1.1-20170926 tiene una vulnerabilidad de denegaci\u00f3n de servicio al enviar un mensaje de multidifusi\u00f3n manipulado en una red local."}], "id": "CVE-2022-23382", "lastModified": "2024-11-21T06:48:29.300", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "cve@mitre.org", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-09-11T15:15:52.553", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "http://lackylab.pl/articles/CVE-2022-23382.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "http://lackylab.pl/articles/CVE-2022-23382.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-400"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}