← Back

CVE-2022-38789

nvd nist
Published: Sep 15, 2022Modified: Nov 21, 2024

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.

Affected (3)

Airties
3 products
Air 4920 Firmware
Air 4921 Firmware
Air 4971 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Air 4920 Firmware
Before 2020-08-04
Running on/withPlatform Versions
Airties
Air 4920
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Air 4921 Firmware
Before 2020-08-04
Running on/withPlatform Versions
Airties
Air 4921
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Air 4971 Firmware
Before 2020-08-04
Running on/withPlatform Versions
Airties
Air 4971
All versions

Related CWEs

CWE-639
Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (4)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.