CVE-2022-38625
29.08.2022, 23:15
Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position is that this is a design choice, not a vulnerabilityEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| patlite | nbm-d88n_firmware | 𝑥 ≤ 1.46 |
| patlite | nhl-3fb1_firmware | 𝑥 ≤ 1.46 |
| patlite | nhl-3fv1n_firmware | 𝑥 ≤ 1.46 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| patlite | nbm-d88n_firmware | 𝑥 ≤ 1.46 | ADP |
| patlite | nhl-3fb1_firmware | 𝑥 ≤ 1.46 | ADP |
| patlite | nhl-3fv1n_firmware | 𝑥 ≤ 1.46 | ADP |
Common Weakness Enumeration
References