CVE-2022-36324

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Aug 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-363254.8Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated rem CVE-2022-363264.9An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount CVE-2022-363279.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to write files to CVE-2022-363284.9Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could allow an attacker to create arbitrar CVE-2022-363297.5An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism was discovered in We CVE-2022-36333.3A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can CVE-2022-363308.1A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in CVE-2022-363317.5Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could al CVE-2022-363367.8A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents could allow a local CVE-2022-363378.2An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow vulnerability in the MebxConfiguration driv CVE-2022-363388.2An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver FwBlockServiceSmm, c CVE-2022-363397.8Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element m