Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-4636

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Black Box KVM ACR1020A-T

Default version status: unaffected

  • 3.4.31307affected

Black Box KVM ACR1002A-R

Default version status: unaffected

  • 3.4.31307affected

Black Box KVM ACR1002A-T

Default version status: unaffected

  • 3.4.31307affected

Black Box KVM ACR1000A-T-R2

Default version status: unaffected

  • 3.4.31307affected

Black Box KVM ACR1000A-R-R2

Default version status: unaffected

  • 3.4.31307affected

References