1. Home
  2. CVE Database
  3. CVE-2022-1522
MEDIUM · 5.3

CVE-2022-1522

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that...

Vulnerability Description

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Cognex3D-A1000 Dimensioning System Firmware<= 1.0.3\(3354\)
Cognex3D-A1000 Dimensioning System-

Related Weaknesses (CWE)

CWE-117

References

FAQ

What is CVE-2022-1522?

CVE-2022-1522 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that...

How severe is CVE-2022-1522?

CVE-2022-1522 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-1522?

Check the references section above for vendor advisories and patch information. Affected products include: Cognex 3D-A1000 Dimensioning System Firmware, Cognex 3D-A1000 Dimensioning System.