CVE-2022-1522CWE-117

Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs

Medium · published September 6, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.6th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2022-09-06T22:19Z
EPSS history
Timeline
  • 06 SEP 22:19Z
    Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs
    cvelistv5