CRITICAL

CVE-2022-34668

CVSS v3

9.8

CRITICAL

EPSS Score

27.1%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Technical details

Published
8/29/2022

Frequently asked questions

What is CVE-2022-34668?

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Is CVE-2022-34668 actively exploited?

Active exploitation of CVE-2022-34668 has not been confirmed. The EPSS score is 27.1%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-34668?

CVE-2022-34668 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2022-34668 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.