CVE-2022-40525CWE-200

Information Exposure in Linux Networking Firmware

High · published June 6, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00113 · 1.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-06-06T07:38Z
EPSS history
Timeline
  • 06 JUN 07:38Z
    Information Exposure in Linux Networking Firmware
    cvelistv5