Cyber Resilience

CVE-2022-43869

Medium

Published: 12 February 2023

Published
12 February 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0065 71.4th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2022-43869 is a medium-severity Use of Externally-Controlled Format String (CWE-134) vulnerability in Ibm Elastic Storage System. Its CVSS base score is 6.5 (Medium).

Operationally, ranked in the top 28.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) could allow an authenticated user to cause a denial of service through the GUI using a format string…

more

attack. IBM X-Force ID: 239539.

CWE(s)
CWE-134

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

ibm
elastic storage system
6.1.0.0 — 6.1.2.4 · 6.1.3.0 — 6.1.4.1
ibm
spectrum scale
5.1.0.0 — 5.1.2.8 · 5.1.3.0 — 5.1.5.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References