CVE-2022-47525

HIGH

Fox-it Fox Datadiode Firmware - Divide By Zero

Title source: rule

Description

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user interaction.

References (2)

[Product] https://www.fox-it.com/nl-en/fox-crypto/fox-datadiode/

[Product] https://www.fox-it.com/nl-en/software-vulnerability-report/

Scores

CVSS v3 7.5

EPSS 0.0021

EPSS Percentile 43.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-369

Status published

Affected Products (1)

fox-it/fox_datadiode_firmware

Timeline

Published May 31, 2023

Tracked Since Feb 18, 2026