CVE-2022-26516CWE-345

ICSA-22-104-03 Red Lion DA50N

High · published April 20, 2022

CVSS v3.1
8.4
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

Authorized users may install a maliciously modified package file when updating the device via the web user interface. The user may inadvertently use a package file obtained from an unauthorized source or a file that was compromised between download and deployment.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.1th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2022-04-20T15:30Z
EPSS history
Timeline
  • 20 APR 15:30Z
    ICSA-22-104-03 Red Lion DA50N
    cvelistv5