CVE-2022-3864CWE-347

A vulnerability exists in the Relion update package signature validation

Medium · published January 4, 2024

CVSS v3.1
4.5
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED to restart. After restart the device is back to normal operation.

An attacker could exploit the vulnerability by first gaining access to

the system with security privileges and attempt to update the IED

with a malicious update package. Successful exploitation of this

vulnerability will cause the IED to restart, causing a temporary Denial of Service.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-01-04T09:31Z
EPSS history
Timeline
  • 04 JAN 09:31Z
    A vulnerability exists in the Relion update package signature validation
    cvelistv5