CVE-2022-29523
MEDIUMCVSS 5.5/10EPSS 0.18%
Last modified
CVE-2022-29523 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Open Cas Project | Open Cas | < 22.3.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-29523?
Improper conditions check in the Open CAS software maintained by Intel(R) before version 22.3.1 may allow an authenticated user to potentially enable denial of service via local access.
How severe is CVE-2022-29523?
CVE-2022-29523 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2022-29523?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-29517A directory traversal vulnerability exists in the HelpdeskAc…8.8
- CVE-2022-29518Screen Creator Advance2, HMI GC-A2 series, and Real time rem…7
- CVE-2022-29519Cleartext transmission of sensitive information vulnerabilit…7.5
- CVE-2022-2952GE CIMPICITY versions 2022 and prior is vulnerable when da…7.8
- CVE-2022-29520An OS command injection vulnerability exists in the console_…9.8
- CVE-2022-29522Use after free vulnerability exists in the simulator module …7.8
- CVE-2022-29524Out-of-bounds write vulnerability exists in V-Server v4.0.11…7.8
- CVE-2022-29525Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-…9.8
- CVE-2022-29526Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Pri…5.3
- CVE-2022-29527Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a worl…7
- CVE-2022-29528An issue was discovered in MISP before 2.4.158. PHAR deseria…9.8
- CVE-2022-29529An issue was discovered in MISP before 2.4.158. There is sto…5.4
Are you affected by CVE-2022-29523?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST