CVE-2022-4636 — Black Box / KVM ACR1020A-T

Description (CNA)

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion.

Affected (CNA)

Vendor / product	Versions
Black Box / KVM ACR1020A-T	affected 3.4.31307
Black Box / KVM ACR1002A-R	affected 3.4.31307
Black Box / KVM ACR1002A-T	affected 3.4.31307
Black Box / KVM ACR1000A-T-R2	affected 3.4.31307
Black Box / KVM ACR1000A-R-R2	affected 3.4.31307

CWE

CWE-22

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-010-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-23-010-01

CISA-ADP

No English description supplied.

No references supplied.