CVE-2022-32284 Denial of service in Communication Module for Wide Area Communication Router (for AW810D) VI461
A remote attacker can cause a denial-of-service condition on Yokogawa AW810D routers by sending specially crafted packets due to insufficient randomness.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-32284?
CVE-2022-32284 is a high-severity denial of service vulnerability in Yokogawa Electric Corporation Communication Module for Wide Area Communication Router (for AW810D) VI461, published on 4 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WAC Router) AW810D, which may allow a remote attacker to cause denial-of-service (DoS) condition by sending a specially crafted packet.
Weakness: CWE-330
Which versions are affected by CVE-2022-32284?
It affects 1 product.
Products include Yokogawa Aw810d Firmware.
How do I fix CVE-2022-32284?
No fix has been published for CVE-2022-32284 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-32284 being exploited?
There is no known exploitation of CVE-2022-32284 in the wild and no public exploit code.
Sources
Also known as GHSA-q6jr-mp8x-xvmq.