Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-3088

CVSS 7.8 · High EPSS 0.05% · P15
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-3088

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T System Image: Versions v3.0 and v3.1, UC-8200 System Image: v1.0 to v1.5, AIG-300 System Image: v1.0 to v1.4, UC-8410A with Debian 9 System Image: Versions v4.0.2 and v4.1.2, UC-8580 with Debian 9 System Image: Versions v2.0 and v2.1, UC-8540 with Debian 9 System Image: Versions v2.0 and v2.1, and DA-662C-16-LX (GLB) System Image: Versions v1.0.2 to v1.1.2 of Moxa's ARM-based computers have an execution with unnecessary privileges vulnerability, which could allow an attacker with user-level privileges to gain root privileges.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
带着不必要的权限执行
Source: NVD (National Vulnerability Database)
Vulnerability Title
MOXA ARM-Based Computers 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MOXA ARM-Based Computers是中国摩莎(MOXA)公司的一系列工业计算机。 MOXA ARM-Based Computers存在安全漏洞,该漏洞源于存在不必要的权限执行,可能允许具有用户级权限的攻击者获得root权限和对系统的完全控制
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
MoxaUC-8100A-ME-T System Imaage 1.0 ~ 1.6 -
MoxaUC-2100 System Image 1.0 ~ 1.12 -
MoxaUC-2100-W System Image 1.0 ~ 1.12 -
MoxaUC-3100 System Image 1.0 ~ 1.6 -
MoxaUC-5100 System Image 1.0 ~ 1.4 -
MoxaUC-8100 System Image 3.0 ~ 3.5 -
MoxaUC-8100-ME-T System Image 3.0 ~ 3.1 -
MoxaUC-8200 System Image 1.0 ~ 1.5 -
MoxaAIG-300 System Image 1.0 ~ 1.4 -
MoxaUC-8410A with Debian 9 System Image 4.0.2 and 4.1.2 -
MoxaUC-8580 with Debian 9 System Image 2.0 and 2.1 -
MoxaUC-8540 with Debian 9 System Image 2.0 and 2.1 -
MoxaDA-662C-16-LX (GLB) System Image 1.0.2 ~ 1.1.2 -

II. Public POCs for CVE-2022-3088

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-3088

登录查看更多情报信息。

IV. Related Vulnerabilities

V. Comments for CVE-2022-3088

No comments yet


Leave a comment