PT-2022-15989

CVE-2022-23431

Published

2022-02-11

Updated

2022-02-18

CVSS 3.1

6.7

Medium

MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RPMB ldfw versions prior to SMR Feb-2022 Release 1

Description The issue is related to an improper boundary check in RPMB ldfw, which allows for arbitrary memory write and code execution.

Recommendations For versions prior to SMR Feb-2022 Release 1, update to SMR Feb-2022 Release 1 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾