Vulnerabilities

TI-2022-18568 CVE-2022-39186 · GHSA-rvf2-5462-xv53

EXFO - BV-10 Performance Endpoint Unit Misconfiguration

LOW 27

EXFO - BV-10 Performance Endpoint Unit misconfiguration.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00168 Published 2023-01-12 No fix listed CWE-732

TI-2022-18567 CVE-2022-39185 · GHSA-qhfg-3j7q-77q7

MEDIUM 50

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00638 Published 2023-01-12 No fix listed CWE-798

TI-2022-18566 CVE-2022-39184 · GHSA-5x28-qq48-wpwq

MEDIUM 50

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00784 Published 2023-01-12 No fix listed CWE-287