Read the docs

Fwupd

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Fwupd records in CISA KEV

No Fwupd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fwupd 1 record LOW

Records

1 record in Fwupd · all components

TI-2022-03037 CVE-2022-3287 · GHSA-7qqr-wwjq-98v6

When creating an OPERATOR user account on the BMC, the redfish plugin saved the…

Priority LOW 30

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuratio…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00827 Published 2022-09-28 Fixed CWE-256
Open these records in search →