ZeroHour

CVE-2022-38453

CVSS 3.1
4.4 medium
EPSS
<1%p8
Published
()
Modified
Description

Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation settings. These compiler settings greatly decrease the level of effort for a threat actor to reverse engineer sensitive code and identify additional vulnerabilities.

Vendors
contechealth
Products
cms8000 firmware
Weakness
CWE-489
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.