CVE-2022-45182 : Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.

Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.

Published 2022-11-11 20:15:20

Updated 2022-11-16 18:12:50

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2022-45182

Pistar » Pi-star Digital Voice Dashboard
Versions before (<) 2022-10-03
cpe:2.3:a:pistar:pi-star_digital_voice_dashboard:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.34%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 71 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/5aa194df3dfc92cc21f6604bbda32268f4a624ce

Update admin.php · AndyTaylorTweet/Pi-Star_DV_Dash@5aa194d · GitHub
Patch;Third Party Advisory
https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/0ad7d00210fc2c0eb7073e5ed429ac265ccfebbd

Update link_manager.php · AndyTaylorTweet/Pi-Star_DV_Dash@0ad7d00 · GitHub
Patch;Third Party Advisory
https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/commit/1e46533f4051648bc40478d99201f19241bbaa41

Update link_manager.php · AndyTaylorTweet/Pi-Star_DV_Dash@1e46533 · GitHub
Patch;Third Party Advisory
https://www.pistar.uk/

Home - pistar.uk
Product;Vendor Advisory
https://github.com/AndyTaylorTweet/Pi-Star_DV_Dash/issues/169

Report security issue - CVE-2022-45182 · Issue #169 · AndyTaylorTweet/Pi-Star_DV_Dash · GitHub
Issue Tracking;Third Party Advisory

Jump to