CVE-2022-31812
Last modified
CVE-2022-31812 is a high-severity vulnerability rated 8.7/10 on the CVSS scale. A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past the end of an allocated buffer while checking the integrity of incoming packets. This could allow an unauthenticated remote attacker to create a denial of service condition.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Sipass Integrated | < 2.95.3.18 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2022-31812?
How severe is CVE-2022-31812?
How do I fix CVE-2022-31812?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-31805In the CODESYS Development System multiple components in mul…7.5
- CVE-2022-31806In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions pr…9.8
- CVE-2022-31807A vulnerability has been identified in Building X - Security…5.5
- CVE-2022-31808A vulnerability has been identified in SiPass integrated AC5…7.8
- CVE-2022-3181An Improper Input Validation vulnerability exists in Trihedr…7.5
- CVE-2022-31810A vulnerability has been identified in SiPass integrated (Al…7.5
- CVE-2022-31813Apache HTTP Server 2.4.53 and earlier may not send the X-For…9.8
- CVE-2022-31814pfSense pfBlockerNG through 2.1.4_26 allows remote attackers…9.8
- CVE-2022-3182Improper Access Control vulnerability in the Duo SMS two-fac…7
- CVE-2022-31827MonstaFTP v2.10.3 was discovered to contain a Server-Side Re…9.1
- CVE-2022-3183Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 conta…9.8
- CVE-2022-31830Kity Minder v1.3.5 was discovered to contain a Server-Side R…9.1
Are you affected by CVE-2022-31812?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST