Vulnerability · Published Mar 29, 2022 · Assigned by VulDB

CVE-2022-1077TEM FLEX-1080/FLEX-1085 Log information disclosure

Medium 5.3

In plain English

A medium-severity information exposure in FLEX-1080 from TEM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)2.5%top 15.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication.

Affected products (as reported)

Vendor	Product	Versions
TEM	FLEX-1080	1.6.0
TEM	FLEX-1085	1.6.0

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://vuldb.com/?id.194848 x_refsource_MISC