Approved changes feed: RSS · Atom
cpe:2.3:a:nedi:nedi:*:*:*:*:*:freebsd:*:*part: a version: * update: *
| Vendor | Nedi (50c5be95-9e8f-5935-bd79-66af7fd3195d) |
|---|---|
| Product | Nedi (184071d1-d82e-5b07-803f-fa169cf4d013) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | freebsd |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-40895 |
vulnerable | 2026-06-08 05:48:28.287134 |
Details available
In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated, remote attacker to affect the integrity of a device via a User Enumeration vulnerability. The vulnerability is due to insecure design, where a difference in forgot password utility could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users. This affects NeDi 1.0.7 for OS X 1.0.7 <= and NeDi for Suse 1.0.7 <= and NeDi for FreeBSD 1.0.7 <=.
Published: 2022-10-06T00:00:00.000Z
Updated: 2024-08-03T12:28:42.915Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.