Vulnerability · Published Nov 2, 2022 · Assigned by CERTVDE
CVE-2022-3575Frauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability
Critical 9.8
In plain English
A critical-severity unrestricted file upload in Diagnostic System FDS102 from Frauscher Sensortechnik. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.9%top 41.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Frauscher Sensortechnik | Diagnostic System FDS102 | v2.8.0 – through v2.9.1 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H