Card’S Web Service Component
Approved changes feed: RSS · Atom
cpe:2.3:a:nhi:card’s_web_service_component:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nhi (3e9f3b86-8e17-5584-ac2e-35ca2e852baa) |
|---|---|
| Product | Card’S Web Service Component (aee21c3a-2ed7-5e86-9061-c7d7d4e13a42) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-35219 |
vulnerable | 2026-06-08 05:46:04.276737 |
NHI card’s web service component - Stack-based Buffer Overflow-2
MEDIUM (5.5)
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
Published: 2022-08-02T15:20:19.164Z
Updated: 2024-09-16T23:51:28.770Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35218 |
vulnerable | 2026-06-08 05:46:04.276384 |
NHI card’s web service component - Heap-based Buffer Overflow
MEDIUM (5.5)
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
Published: 2022-08-02T15:20:04.675Z
Updated: 2024-09-16T19:15:40.514Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35217 |
vulnerable | 2026-06-08 05:46:04.275157 |
NHI card’s web service component - Stack-based Buffer Overflow-1
HIGH (7.8)
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.
Published: 2022-08-02T02:55:28.143Z
Updated: 2024-09-16T20:53:13.282Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.