Skip to main content

Firewall CVE-2022-0675

CRITICAL
Improper Validation of Unsafe Equivalence in Input (CWE-1289)
2022-03-02 security@puppet.com
Information Disclosure Firewall
9.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 02, 2022 - 21:15 nvd
CRITICAL 9.8

DescriptionNVD

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state.

AnalysisAI

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1289. In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state. Affected products include: Puppet Firewall.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Firewall

View all
CVE-2022-3236 CRITICAL POC
9.8 Sep 23

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewa
CVE-2019-14270 HIGH POC
7.1 Jul 25

Comodo Antivirus through 12.0.0.6870, Comodo Firewall through 12.0.0.6870, and Comodo Internet Security Premium through

CVE-2012-4923 MEDIUM POC
4.3 Sep 15

Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary we
CVE-2024-7249 HIGH
7.8 Jul 29

Comodo Firewall Link Following Local Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerabil
CVE-2023-5552 HIGH
7.5 Oct 18

A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to

CVE-2022-1807 HIGH
7.2 Sep 07

Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall ol
CVE-2023-42552 LOW
3.3 Nov 07

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 i

Same weakness CWE-1289 – Improper Validation of Unsafe Equivalence in Input

View all
CVE-2024-45179 HIGH POC
7.2
CVE-2024-45308 MEDIUM POC
6.5
CVE-2026-39821 CRITICAL
9.6
CVE-2024-8372 MEDIUM POC
4.3
CVE-2024-42219 HIGH
7.8
CVE-2026-49942 HIGH
7.3
CVE-2026-39972 HIGH
7.1
CVE-2026-27610 HIGH
7.0

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-0675 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy