What is CVE-2022-38399?

CVE-2022-38399 is a medium-severity vulnerability in Planex Cs-Qr10, classified under Improper Authentication. CVSS score: 6.8/10. Published 2022-09-08.

How severe is CVE-2022-38399?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Auth bypass in Planex Cs-Qr10

CVE-2022-38399

Missing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and SmaCam Night Vision CS-QR20 all versions allows an attacker to execute an arbitrary OS command by having the product connect to the product's specific serial connection

Vulnerability class: Broken Authentication

EPSS: 0.003 (26.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Planex Cs-qr10
Planex Cs-qr10_firmware
Planex Cs-qr20
Planex Cs-qr20_firmware
Planex Communications Inc. Smacam Cs-qr10 And Night Vision Cs-qr20 — versions All versions

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

vultures@jpcert.or.jp (Product, x_refsource_MISC)
vultures@jpcert.or.jp (Product, x_refsource_MISC)
vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-38399?: CVE-2022-38399 is a medium-severity vulnerability in Planex Cs-Qr10, classified under Improper Authentication. CVSS score: 6.8/10. Published 2022-09-08.
How severe is CVE-2022-38399?: Medium severity. CVSS v3 base score is 6.8 out of 10.