1. Home
  2. CVE Database
  3. CVE-2022-3027
MEDIUM · 5.7

CVE-2022-3027

The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, w...

Vulnerability Description

The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, when the device attempts connecting to the malicious SSID, the device can be exploited to write arbitrary files or display incorrect information.

CVSS Score

5.7

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
ContechealthCms8000 Firmware-
ContechealthCms8000-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2022-3027?

CVE-2022-3027 is a vulnerability with a CVSS score of 5.7 (MEDIUM). The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard characters that, w...

How severe is CVE-2022-3027?

CVE-2022-3027 has been rated MEDIUM with a CVSS base score of 5.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-3027?

Check the references section above for vendor advisories and patch information. Affected products include: Contechealth Cms8000 Firmware, Contechealth Cms8000.