Vulnerability Details CVE-2022-34668
NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.139
EPSS Ranking 93.9%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2022-34668
-
cpe:2.3:a:nvidia:nvflare:2.0.0
-
cpe:2.3:a:nvidia:nvflare:2.0.1
-
cpe:2.3:a:nvidia:nvflare:2.0.14
-
cpe:2.3:a:nvidia:nvflare:2.0.15
-
cpe:2.3:a:nvidia:nvflare:2.0.16
-
cpe:2.3:a:nvidia:nvflare:2.0.17
-
cpe:2.3:a:nvidia:nvflare:2.0.18
-
cpe:2.3:a:nvidia:nvflare:2.0.2
-
cpe:2.3:a:nvidia:nvflare:2.0.3
-
cpe:2.3:a:nvidia:nvflare:2.0.4
-
cpe:2.3:a:nvidia:nvflare:2.0.5
-
cpe:2.3:a:nvidia:nvflare:2.0.6
-
cpe:2.3:a:nvidia:nvflare:2.1.0
-
cpe:2.3:a:nvidia:nvflare:2.1.1
-
cpe:2.3:a:nvidia:nvflare:2.1.2
-
cpe:2.3:a:nvidia:nvflare:2.1.3