CVE-2022-3575

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Nov 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-357507.8Win32k Elevation of Privilege VulnerabilityCVE-2022-357517.8Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2022-357528.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2022-357538.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2022-357546.7Unified Write Filter Elevation of Privilege VulnerabilityCVE-2022-357557.3Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-357567.8Windows Kerberos Elevation of Privilege VulnerabilityCVE-2022-357577.3Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2022-357585.5Windows Kernel Memory Information Disclosure VulnerabilityCVE-2022-357596.5Windows Local Security Authority (LSA) Denial of Service VulnerabilityCVE-2022-35767.5A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows rCVE-2022-357607.8Microsoft ATA Port Driver Elevation of Privilege Vulnerability