CVE-2022-3088
highPriorität · verfolgen · 31EPSS 0.002 · 9. PerzentilEURUUSEPSS · bewertet 2026-10-27
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationAIG-300 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationDA-662C-16-LX (GLB) System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-2100 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-2100-W System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-3100 System Imagcisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-5100 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8100 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8100-ME-T System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8100A-ME-T System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8200 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8410A with Debian 9 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8540 with Debian 9 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability - MitigationUC-8580 with Debian 9 System Imagecisa_csaf_ot
Moxa developed updates to address this vulnerability. Users should follow the instructions in Moxa's security advisory to update their system image.
https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerability
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (127)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-22-326-05Moxa Multiple ARM-Based Computers2022-11-22icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could provide an attacker with root privileges and total control of the system.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (6)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2022-3088/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.6116cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-05cnnvd
- https://www.moxa.com/en/support/product-support/security-advisory/moxa-arm-based-computer-improper-privilege-management-vulnerabilityPatchcnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-05enisa_euvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-326-05Third Party AdvisoryUS Government Resourcenvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan