2022-07-17 - CVE Archive

CVE-2022-26352 Jul 17, 22:15 CRITICAL POC KEV THREAT Emergency

An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Path Traversal Dotcms

NVD

CVSS 3.1

9.8

EPSS

91.5%

CVE-2022-32985 Jul 17, 23:15 CRITICAL POC Act Now

libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Gigaswitch 641 Desk V5 Sfp Vi Firmware Gigaswitch 642 Desk V5 Sfp 2Vi Firmware Gigaswitch V5 2Tp Pd F Sfp Vi 54Vdc Firmware Gigaswitch V5 2Tp Pse Sfp Vi 54Vdc Firmware +9

NVD

CVSS 3.1

9.8

EPSS

1.1%

CVE-2022-31211 Jul 17, 23:15 CRITICAL POC Act Now

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Brute Force Iray A8Z3 Firmware Infiray

NVD

CVSS 3.1

9.8

EPSS

1.5%

CVE-2022-26479 Jul 17, 23:15 CRITICAL POC Act Now

An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Eagleeye Director Ii Firmware Poly

NVD

CVSS 3.1

9.8

EPSS

1.7%

CVE-2022-31210 Jul 17, 23:15 CRITICAL Act Now

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Iray A8Z3 Firmware Infiray

NVD

CVSS 3.1

9.8

EPSS

1.0%

CVE-2022-31209 Jul 17, 23:15 CRITICAL Act Now

An issue was discovered in Infiray IRAY-A8Z3 1.0.957. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Iray A8Z3 Firmware Infiray

NVD

CVSS 3.1

9.8

EPSS

1.2%