CyberSecBulletin

Fox-it vulnerabilities

We track 2 vulnerabilities in Fox-it products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 31, 2023.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Fox-it vulnerabilities

  • 9.8 Critical severity

    Fox Datadiode Firmware: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2022-47526Fox-itEPSS 1.3%

    Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user

  • 7.5 High severity

    Fox Datadiode Firmware: Divide By Zero

    CVE-2022-47525Fox-it

    Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction.