[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWWMfi62R4G6JOo55fdPqiCrbKVtDxZeldNuiqk4AqX0":3,"g5a-risk:CVE-2022-23004":112},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":43,"weaknesses":51,"weaknessesCount":71,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":107,"notableEvents":108},"CVE-2022-23004","What is CVE-2022-23004?","When computing a shared secret or point multiplication on the NIST P-256 curve using a public key with an X coordinate of zero, an error is returned from the library, and an invalid unreduced value is written to the output buffer. This may be leveraged by an attacker to cause an error scenario, resulting in a limited denial of service for an individual user. The scope of impact cannot extend to other components.","When computing a shared secret or point multiplication on the NIST P-256 curve using a public key with an X coordinate of zero, an error is returned from the...","2022-07-29T19:15:08.417","2022-08-05T18:49:10.837",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"psirt@wdc.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.0072,[35,35,35,35,35,33,33],0.00699,"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"westerndigital","sweet_b","1","cpe:2.3:a:westerndigital:sweet_b:1:*:*:*:*:*:*:*",1,[45],{"url":46,"source":47,"tags":48},"https:\u002F\u002Fwww.westerndigital.com\u002Fsupport\u002Fproduct-security\u002Fwdc-22013-sweet-b-incorrect-output-vulnerabilities","Westerndigital",[49,50],"Product","Vendor Advisory",[52,60,66],{"id":53,"name":54,"description":55,"extendedDescription":56,"status":57,"abstraction":58,"structure":59},"CWE-707","Improper Neutralization","The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.","If a message is malformed, it may cause the message to be incorrectly interpreted.\nNeutralization is an abstract term for any technique that ensures that input (and output) conforms with expectations and is \"safe.\"  This can be done by:\nThis weakness typically applies in cases where the product prepares a control message that another process must act on, such as a command or query, and malicious input that was intended as data, can enter the control plane instead. However, this weakness also applies to more general cases where there are not always control implications.","Incomplete","Pillar","Simple",{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":58,"structure":59},"CWE-682","Incorrect Calculation","The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.","When product performs a security-critical calculation incorrectly, it might lead to incorrect resource allocations, incorrect privilege assignments, or failed comparisons among other things. Many of the direct results of an incorrect calculation can lead to even larger problems such as failed protection mechanisms or even arbitrary code execution.","Draft",{"id":67,"name":68,"description":69,"extendedDescription":70,"status":57,"abstraction":58,"structure":59},"CWE-703","Improper Check or Handling of Exceptional Conditions","The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.","",3,false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2022-23004? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-23004, a medium severity cyber security vulnerability from 2022. When computing a shared secret or point multiplication on...","CVE-2022-23004, CVE-2022-23004 vulnerability, CVE-2022-23004 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, westerndigital security, sweet_b vulnerability","\u002Fwhat-is\u002Fcve-2022-23004",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-23004","Cybersecurity","CVE-2022-23004, CVE-2022-23004 vulnerability, CVE-2022-23004 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":26,"Negate":26,"Nodes":101},[102],{"Operator":103,"Negate":26,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BD0868BB-4143-41EC-9A15-C16C98EF851C",[],[],{"lastModified":11,"cacheTime":110,"version":111},1792282964651,"2.0",{"score":113,"band":114,"action":115,"scoredAt":116},22,"Low","Monitor","2026-10-16T06:55:18.107728+00:00"]