CVE-2022-46143CWE-1284

Affected devices do not check the TFTP blocksize correctly

Medium · published December 13, 2022

CVSS v4.0
5.1
EPSS
1%
Percentile
54.3
In the wild
Unconfirmed
What it is

Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00746 · 54.3th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2022-12-13T00:00Z
EPSS history
Timeline
  • 13 DEC 00:00Z
    Affected devices do not check the TFTP blocksize correctly
    cvelistv5