Fox Datadiode Firmware vulnerabilities

2 known vulnerabilities in Fox Datadiode Firmware from Fox-it. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Fox Datadiode Firmware: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-47526May 31, 2023Fox-itEPSS 1.3%

  Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user

• 7.5 High severity

  Fox Datadiode Firmware: Divide By Zero

  CVE-2022-47525May 31, 2023Fox-it

  Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction.