Skip to content
OpenAdvisories
High · 7.5 CVE-2022-4636 EUVD-2022-51966GHSA-746p-8vmw-cpvx

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to pa…

Published Jan 10, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Vendor: Black Box Product: KVM ACR1000A-R-R2 Product: KVM ACR1000A-T-R2 Product: KVM ACR1002A-R Product: KVM ACR1002A-T Product: KVM ACR1020A-T Category: Virtualization

Description

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to path traversal, which may allow an attacker to steal user credentials and other sensitive information through local file inclusion.

Affected products

VendorProductAffectedFixed
Black Box KVM ACR1020A-T 3.4.31307 —
Black Box KVM ACR1002A-R 3.4.31307 —
Black Box KVM ACR1002A-T 3.4.31307 —
Black Box KVM ACR1000A-T-R2 3.4.31307 —
Black Box KVM ACR1000A-R-R2 3.4.31307 —

Advisories 1

References