← Database

CVE-2022-38625

HIGH CVSS: 8.8 Published: 2022-08-29 Modified: 2026-06-17

Description

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position is that this is a design choice, not a vulnerability

Affected Platforms

Patlite Nbm-D88N FirmwarePatlite Nhl-3Fb1Patlite Nhl-3Fv1NPatlite Nhl-3Fb1 FirmwarePatlite Nbm-D88NPatlite Nhl-3Fv1N Firmware

Weakness Type

CWE-345, CWE-345

References