CVE-2022-3575
Last modified
CVE-2022-3575 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.. EPSS estimates a 0.71% chance of exploitation in the next 30 days.
Description
Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Frauscher | Frauscher Diagnostic System 102 | 2.8.0 |
| Frauscher | Frauscher Diagnostic System 102 | 2.9.0 |
| Frauscher | Frauscher Diagnostic System 102 | 2.9.1 |
References
- https://www.frauscher.com/en/psirtVendor Advisory
- https://www.frauscher.com/en/psirtVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-3575?
How severe is CVE-2022-3575?
How do I fix CVE-2022-3575?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-35744Windows Point-to-Point Protocol (PPP) Remote Code Execution …9.8
- CVE-2022-35745Windows Secure Socket Tunneling Protocol (SSTP) Remote Code …8.1
- CVE-2022-35746Windows Digital Media Receiver Elevation of Privilege Vulner…7.8
- CVE-2022-35747Windows Point-to-Point Protocol (PPP) Denial of Service Vuln…5.9
- CVE-2022-35748HTTP.sys Denial of Service Vulnerability7.5
- CVE-2022-35749Windows Digital Media Receiver Elevation of Privilege Vulner…7.8
- CVE-2022-35750Win32k Elevation of Privilege Vulnerability7.8
- CVE-2022-35751Windows Hyper-V Elevation of Privilege Vulnerability7.8
- CVE-2022-35752Windows Secure Socket Tunneling Protocol (SSTP) Remote Code …8.1
- CVE-2022-35753Windows Secure Socket Tunneling Protocol (SSTP) Remote Code …8.1
- CVE-2022-35754Unified Write Filter Elevation of Privilege Vulnerability6.7
- CVE-2022-35755Windows Print Spooler Elevation of Privilege Vulnerability7.3
Are you affected by CVE-2022-3575?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST