PT-2022-23652 · Softwarex · Softwarex
CVE-2022-36848
·
Published
2022-09-09
·
Updated
2023-06-27
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
SoftwareX versions prior to SMR Sep-2022 Release 1
Description
The issue is related to an Improper Authorization vulnerability. It affects the
setDualDARPolicyCmd function, allowing local attackers to cause a local permanent denial of service.Recommendations
For versions prior to SMR Sep-2022 Release 1, update to SMR Sep-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
setDualDARPolicyCmd function to minimize the risk of exploitation.Fix
Improper Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Softwarex