CVE-2022-48474 - Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function

Back Back to CVE browser

HIGH

Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function

Published Sep 12, 2023

8.2

HIGH

CVSS 3.1

EPSS 1.20%

Description

Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process.

Affected products

Vendor Control de Ciber Product Control de Ciber Default
unaffected
- Version
  v1.650
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Control de Ciber

unaffected

Version	Status	Constraints
v1.650	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51170
Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-control-de-ciber
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51170		Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-control-de-ciber		Third Party Advisory