CVE-2022-2964
highpriority · track · 31EPSS 0.003 · 23 %ileCHDEEUNLRUUSEPSS · scored 2026-10-27
A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedRUGGEDCOM ROX MX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX MX5000REsiemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1400siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1500siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1501siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1510siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1511siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1512siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1524siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX1536siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - FixedRUGGEDCOM ROX RX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/ - MitigationARM600abb_psirt
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. The following mitigations are recommended. 15. Avoid using AX88179_178A chipset-based USB -to-Ethernet devices. Refer to section General security recommendations for additional advice on how to keep your system secure.
- MitigationSWabb_psirt
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. The following mitigations are recommended. 15. Avoid using AX88179_178A chipset-based USB -to-Ethernet devices. Refer to section General security recommendations for additional advice on how to keep your system secure.
- MitigationARM600cisa_csaf_ot
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. The following mitigations are recommended. 15. Avoid using AX88179_178A chipset-based USB -to-Ethernet devices. Refer to section General security recommendations for additional advice on how to keep your system secure.
- MitigationSWcisa_csaf_ot
Mitigating factors describe conditions and circumstances that make an attack that exploits the vulnerability difficult or less likely to succeed. The following mitigations are recommended. 15. Avoid using AX88179_178A chipset-based USB -to-Ethernet devices. Refer to section General security recommendations for additional advice on how to keep your system secure.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (85)
Products and version ranges known to be affected.
advisories (9)
Vendor and ecosystem advisories describing this.
- 2NGA002579ABB Arctic communication solution ARM600 Vulnerabilities2025-04-07csaf · abb_psirtCH
ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.
- NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
- SSA-202008SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.02025-12-09csaf · siemens_psirtDE
Ruggedcom ROX familly contain multiple vulnerabilities before V2.17.0 Siemens has released new versions for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2022-1374Linux Kernel: Mehrere SchwachstellenDeutsch2022-09-11csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen und seine Privilegien zu erweitern.
- WID-SEC-W-2023-0809IBM QRadar SIEM: Mehrere SchwachstellenDeutsch2023-03-30csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.
- WID-SEC-W-2023-1737Juniper Patchday Juli 2023Deutsch2023-07-12csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Juniper Produkten ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern.
- WID-SEC-W-2024-0064Juniper Produkte: Mehrere SchwachstellenDeutsch2024-01-10csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper JUNOS Evolved, Juniper SRX Series, Juniper EX Series, Juniper QFX Series, Juniper ACX Series, Juniper PTX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Berechtigungen zu erweitern.
- WID-SEC-W-2024-0794Dell ECS: Mehrere SchwachstellenDeutsch2024-04-04csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.
- ICSA-25-105-08ABB M2M Gateway2025-04-07icsa · cisa_csaf_otUS
ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (21)
External citations — patches, advisories, analysis.
- https://bugzilla.redhat.com/show_bug.cgi?id=2067482cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-2964/cnnvd
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=57bc3d3ae8c14df3ceb4e17d26ddf9eeab304581Patchcnnvd
- https://packetstormsecurity.com/files/168589/Ubuntu-Security-Notice-USN-5650-1.htmlcnnvd
- https://packetstormsecurity.com/files/170497/Red-Hat-Security-Advisory-2023-0114-01.htmlcnnvd
- https://packetstormsecurity.com/files/170802/Red-Hat-Security-Advisory-2023-0536-01.htmlcnnvd
- https://security.netapp.com/advisory/ntap-20230113-0001/cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.6052cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan