CVE-2022-45876:
First published: Wed Apr 26 2023(Updated: )
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VISAM VBASE Pro-RT/ Server-RT (Web Remote) | <11.7.5 | |
| VISAM VBASE |
Remedy
VISAM recommends users update to VBASE 11.7.5 or later. The update can be performed via the VBASE Editor update dialog on machines with secure access to the internet. Users of machines without internet access must manually update by submitting a request form https://www.vbase.net/en/download.php to receive a download link.For more information, users should contact VISAM using the information provided on their contact page https://www.visam.com/kontakt.php (German language).
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-45876?
CVE-2022-45876 is considered a medium severity vulnerability due to potential information disclosure.
How do I fix CVE-2022-45876?
To fix CVE-2022-45876, upgrade VBASE Automation Base to version 11.7.5 or later.
What does CVE-2022-45876 affect?
CVE-2022-45876 affects versions of VISAM VBASE Automation Base prior to 11.7.5.
What kind of information is disclosed by CVE-2022-45876?
CVE-2022-45876 may disclose sensitive information if a valid user opens a specially crafted file.
Who is impacted by CVE-2022-45876?
Valid users of VISAM VBASE Automation Base versions prior to 11.7.5 are impacted by CVE-2022-45876.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/title
- agent/remedy
- agent/event
- agent/first-publish-date
- agent/trending
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- vendor/visam
- canonical/visam vbase pro-rt/ server-rt (web remote)
- canonical/visam vbase