CVE-2022-38453
Low
Description
Multiple binary application files on the CMS8000 device are compiled with 'not stripped' and 'debug_info' compilation settings. These compiler settings greatly decrease the level of effort for a threat actor to reverse engineer sensitive code and identify additional vulnerabilities.
SeverityLow
CVSS3.0
Exploit probability8. percentile0.2%
ProductContechealth Cms8000 Firmware
PublishedSep 13, 2022
First seenSep 13, 2022
Weakness typeCWE-489CWE-489
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| contechealth cms8000_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.