CVE-2022-47311

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 22, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-473177.8Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitraCVE-2022-473188.0ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a reposCVE-2022-47327.2Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.CVE-2022-473208.1The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about deCVE-2022-473225.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-473235.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-473245.5In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.CVE-2022-473255.5In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.CVE-2022-473265.5In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.CVE-2022-473275.5In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.CVE-2022-473285.5In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.CVE-2022-473295.5In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47311: High severity, CVSS 8.8 | Vulnix