This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper session management in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability by sending a specially crafted http request on the targeted device. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to perform session fixation on the targeted device.
References
Link | Resource |
---|---|
https://tacitine.com/newdownload/CVE-2022-40630.pdf | Vendor Advisory |
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363 | Third Party Advisory |
https://tacitine.com/newdownload/CVE-2022-40630.pdf | Vendor Advisory |
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363 | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:21
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
References | () https://tacitine.com/newdownload/CVE-2022-40630.pdf - Vendor Advisory | |
References | () https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2022-0363 - Third Party Advisory |
Information
Published : 2022-09-23 19:15
Updated : 2024-11-21 07:21
NVD link : CVE-2022-40630
Mitre link : CVE-2022-40630
CVE.ORG link : CVE-2022-40630
JSON object : View
Products Affected
tacitine
- en6200-prime_quad-100
- en6200-prime_quad-35_firmware
- en6200-prime_quad-100_firmware
- en6200-prime_quad-35
CWE
CWE-384
Session Fixation