CVE-2022-45963

{"id": "CVE-2022-45963", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-12-27T22:15:15.007", "references": [{"url": "https://gist.github.com/yinfei6/fc6478328f8c2e2bf62a631a81afb265", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability."}], "lastModified": "2023-01-06T15:05:26.767", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5030_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C353DBC-587B-4A73-BEB9-3FB948181834", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5030:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6311CB2-B059-4854-A77B-863C0CC72FDE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5060_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8CCBDDE-4C66-4D48-BECB-5C630A813BDC", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5060:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8604E100-30C7-4E77-A472-F2EFCD6360F3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5080_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17D06207-8F52-4E32-A574-2132117F5BDD", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5080:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "41EAD39A-A15B-420A-B237-8ADAA4623255"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5030-d_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "079B3E3C-F521-4536-9DBF-CFD91E5A7EFD", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5030-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7080A381-EC22-4F44-A9F5-4359C4590060"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5060-d_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E17FB437-FD6B-4F1F-9868-248C5114C080", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5060-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FBEFB7DC-AC49-47FE-9DDF-AA4414B56901"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5080-d_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AF0E6CD-FDB8-4539-BD43-56561F55FEB4", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5080-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "93E15892-27B3-4941-8AF8-E7C118286D53"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f500-6gw_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "870DDE55-3D5B-4103-B082-0B86757AAC2A", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f500-6gw:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4FA952FB-54A3-47D4-981B-5A8D185D8026"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5010_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1E3010C-2BCD-4F60-BD5D-6C3A423811F9", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5010:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FFA969D9-1E07-42DA-BB3F-BD55EEE57FAB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5020_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E91D610-C961-413E-8F0C-8687A90B1882", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5020:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "43401788-4C60-4C45-B3DC-DF62CB5C028A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f5040_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD191E2B-307B-4A70-8E64-C2A52F4FB2B6", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f5040:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "92B7EEA9-B561-40DF-ABC3-6CB5A8ECEE28"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:h3c:secpath_f100-c-g3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBCF6C61-1E65-4DFB-AEA5-DA3331E20F04", "versionEndIncluding": "3.10_ess6703"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:h3c:secpath_f100-c-g3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E05E04B6-F07F-47C7-AF97-3E5A7E062EA4"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}