Log in Start free

Vulnerability · Published Oct 28, 2022 · Assigned by icscert

CVE-2022-3228

Medium 6.5

In plain English

A medium-severity stack buffer overflow in H0-ECOM100 Communications Module from Host Engineering. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 71.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffer overflow on Host Engineering H0-ECOM100 Communications Module Firmware versions v5.0.155 and prior. This may allow an attacker to crash the affected device or cause it to become unresponsive.

Affected products (as reported)

VendorProductVersions
Host Engineering H0-ECOM100 Communications Module All versions – through Firmware v5.0.155

Weakness: CWE-121 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References