What is the CVSS score of CVE-2022-44565?

CVE-2022-44565 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.4%.

Is there a patch available for CVE-2022-44565?

Yes, a patch is available for CVE-2022-44565. Update the affected software to the latest version immediately.

Airmax Ac Firmware CVE-2022-44565

MEDIUM

Improper Access Control (CWE-284)

2022-12-23 support@hackerone.com

Authentication Bypass Airmax Ac Firmware Ui Airfiber Gigabeam Firmware Airfiber 60 Xg Firmware Airfiber 60 Hd Firmware Airfiber 60 Lr Firmware Airfiber 60 Firmware

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Dec 23, 2022 - 15:15 nvd

MEDIUM 5.3

DescriptionNVD

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-284. An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device. Affected products include: Ui Airfiber Gigabeam Firmware, Ui Airfiber 60-Xg Firmware, Ui Airfiber 60-Hd Firmware, Ui Airfiber 60-Lr Firmware, Ui Airmax Ac Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.