CVE-2022-31849 - OpenCVE

MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST request.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:S/C:P/I:P/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Mercurycom	Mipc451-4 Mipc451-4 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:mercurycom:mipc451-4_firmware:1.0.22:*:*:*:*:*:*:*

cpe:2.3:h:mercurycom:mipc451-4:-:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/skyedai910/Vuln/tree/master/MERCURY_MIPC451-4/command_execution_0	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-06-16T14:53:21

Updated: 2022-06-16T14:53:21

Reserved: 2022-05-31T00:00:00

Link: CVE-2022-31849

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-06-16T15:15:09.440

Modified: 2023-08-08T14:21:49.707

Link: CVE-2022-31849

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mercurycom:mipc451-4_firmware:1.0.22:*:*:*:*:*:*:*", "matchCriteriaId": "763C99E1-0824-4699-A002-6A2825B5B987", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mercurycom:mipc451-4:-:*:*:*:*:*:*:*", "matchCriteriaId": "B34AAFED-A618-4F93-9B61-DF3D5495BC7D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST request."}, {"lang": "es", "value": "Se ha detectado que MERCURY MIPC451-4 versi\u00f3n 1.0.22 Build 220105 Rel.55642n, contiene una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remota (RCE) que puede aprovecharse por medio de una petici\u00f3n POST dise\u00f1ada"}], "id": "CVE-2022-31849", "lastModified": "2023-08-08T14:21:49.707", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-06-16T15:15:09.440", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/skyedai910/Vuln/tree/master/MERCURY_MIPC451-4/command_execution_0"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}