CVEvulnerability
CVE-2022-46397
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-329
Description
FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.
Affected configurations
• lfprojects vector packet processor 19.04
• lfprojects vector packet processor 19.08
• lfprojects vector packet processor 20.01
• lfprojects vector packet processor 20.05
• lfprojects vector packet processor 20.09
• lfprojects vector packet processor 21.01
• lfprojects vector packet processor 21.06
• lfprojects vector packet processor 21.10
• lfprojects vector packet processor 22.02
• lfprojects vector packet processor 22.06
• lfprojects vector packet processor 22.10
Related
Weakness · CWE (1)
- CWE-329 Generation of Predictable IV with CBC Mode weakness
References
- https://lists.fd.io/g/security-announce/message/2 Vendor Advisory
- https://s3-docs.fd.io/vpp/23.02/ Product
- https://lists.fd.io/g/security-announce/message/2 Vendor Advisory
- https://s3-docs.fd.io/vpp/23.02/ Product