This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.
References
Link | Resource |
---|---|
https://tacitine.com/newdownload/CVE-2022-40630.pdf | Vendor Advisory |
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363 | Third Party Advisory |
Configurations
History
28 Sep 2022, 14:24
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:tacitine:en6200-prime_quad-100:-:*:*:*:*:*:*:* cpe:2.3:o:tacitine:en6200-prime_quad-100_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:tacitine:en6200-prime_quad-35:-:*:*:*:*:*:*:* cpe:2.3:o:tacitine:en6200-prime_quad-35_firmware:*:*:*:*:*:*:*:* |
|
CWE | CWE-384 | |
First Time |
Tacitine en6200-prime Quad-35 Firmware
Tacitine en6200-prime Quad-100 Tacitine en6200-prime Quad-100 Firmware Tacitine Tacitine en6200-prime Quad-35 |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
References | (MISC) https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363 - Third Party Advisory | |
References | (MISC) https://tacitine.com/newdownload/CVE-2022-40630.pdf - Vendor Advisory |
23 Sep 2022, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-09-23 19:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-40630
Mitre link : CVE-2022-40630
CVE.ORG link : CVE-2022-40630
JSON object : View
Products Affected
tacitine
- en6200-prime_quad-35_firmware
- en6200-prime_quad-100
- en6200-prime_quad-35
- en6200-prime_quad-100_firmware
CWE
CWE-384
Session Fixation