CVE-2022-45876:
First published: Wed Apr 26 2023(Updated: )
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VISAM VBASE | <11.7.5 | |
| VISAM VBASE Automation Base: versions prior to 11.7.5 |
Remedy
VISAM recommends users update to VBASE 11.7.5 or later. The update can be performed via the VBASE Editor update dialog on machines with secure access to the internet. Users of machines without internet access must manually update by submitting a request form https://www.vbase.net/en/download.php to receive a download link.For more information, users should contact VISAM using the information provided on their contact page https://www.visam.com/kontakt.php (German language).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/remedy
- agent/event
- agent/tags
- agent/first-publish-date
- vendor/visam
- canonical/visam vbase
- canonical/visam vbase automation base: versions prior to 11.7.5