Vulnerability · Published Sep 12, 2023 · Assigned by INCIBE
CVE-2022-48474
High 8.2
In plain English
A high-severity uncontrolled resource consumption in Control de Ciber from Control de Ciber. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Control de Ciber | Control de Ciber | v1.650 |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H