[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f87Lq2N9zGtnuJdZsZ1Oa8bbe3Js6-vwnJvam9vU83vw":3,"g5a-risk:CVE-2022-46397":157},{"success":4,"data":5,"meta":154},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":32,"epssPercentile":25,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":71,"references":72,"referencesCount":86,"weaknesses":87,"weaknessesCount":96,"isActivelyExploited":97,"cisaInfo":25,"otxData":25,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":152,"notableEvents":153},"CVE-2022-46397","What is CVE-2022-46397?","FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.","2023-03-28T22:15:09.243","2025-02-19T19:15:11.217",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},0.0062,[32,32,32,32,32,32,32],"High",[36,41,44,47,50,53,56,59,62,65,68],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"lfprojects","vector_packet_processor","19.04","cpe:2.3:a:lfprojects:vector_packet_processor:19.04:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":42,"criteria":43,"vulnerable":4},"19.08","cpe:2.3:a:lfprojects:vector_packet_processor:19.08:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":45,"criteria":46,"vulnerable":4},"20.01","cpe:2.3:a:lfprojects:vector_packet_processor:20.01:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":48,"criteria":49,"vulnerable":4},"20.05","cpe:2.3:a:lfprojects:vector_packet_processor:20.05:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":51,"criteria":52,"vulnerable":4},"20.09","cpe:2.3:a:lfprojects:vector_packet_processor:20.09:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":54,"criteria":55,"vulnerable":4},"21.01","cpe:2.3:a:lfprojects:vector_packet_processor:21.01:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":57,"criteria":58,"vulnerable":4},"21.06","cpe:2.3:a:lfprojects:vector_packet_processor:21.06:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":60,"criteria":61,"vulnerable":4},"21.10","cpe:2.3:a:lfprojects:vector_packet_processor:21.10:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":63,"criteria":64,"vulnerable":4},"22.02","cpe:2.3:a:lfprojects:vector_packet_processor:22.02:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":66,"criteria":67,"vulnerable":4},"22.06","cpe:2.3:a:lfprojects:vector_packet_processor:22.06:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":69,"criteria":70,"vulnerable":4},"22.10","cpe:2.3:a:lfprojects:vector_packet_processor:22.10:*:*:*:*:*:*:*",11,[73,78,82,84],{"url":74,"source":75,"tags":76},"https:\u002F\u002Flists.fd.io\u002Fg\u002Fsecurity-announce\u002Fmessage\u002F2","Fd",[77],"Vendor Advisory",{"url":79,"source":75,"tags":80},"https:\u002F\u002Fs3-docs.fd.io\u002Fvpp\u002F23.02\u002F",[81],"Product",{"url":74,"source":75,"tags":83},[77],{"url":79,"source":75,"tags":85},[81],4,[88],{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":95},"CWE-329","Generation of Predictable IV with CBC Mode","The product generates and uses a predictable initialization Vector (IV) with Cipher Block Chaining (CBC) Mode, which causes algorithms to be susceptible to dictionary attacks when they are encrypted under the same key.","CBC mode eliminates a weakness of Electronic Code\n\t   Book (ECB) mode by allowing identical plaintext blocks to\n\t   be encrypted to different ciphertext blocks. This is\n\t   possible by the XOR-ing of an IV with the initial plaintext\n\t   block so that every plaintext block in the chain is XOR'd\n\t   with a different value before encryption. If IVs are\n\t   reused, then identical plaintexts would be encrypted to\n\t   identical ciphertexts. However, even if IVs are not\n\t   identical but are predictable, then they still break the\n\t   security of CBC mode against Chosen Plaintext Attacks\n\t   (CPA).","Draft","Variant","Simple",1,false,[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2022-46397? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-46397, a high severity cyber security vulnerability from 2023. FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21...","CVE-2022-46397, CVE-2022-46397 vulnerability, CVE-2022-46397 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, lfprojects security, vector_packet_processor vulnerability","\u002Fwhat-is\u002Fcve-2022-46397",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":9,"dateModified":10,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-46397","Cybersecurity","CVE-2022-46397, CVE-2022-46397 vulnerability, CVE-2022-46397 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125],{"Operator":25,"Negate":25,"Nodes":126},[127],{"Operator":128,"Negate":25,"CPEMatch":129},"OR",[130,132,134,136,138,140,142,144,146,148,150],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":131,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"EF4306E2-D3C7-469D-B689-6D83F086838C",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":133,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"8F6BFB07-7C92-44EA-ACA3-F44FED834D5D",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":135,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5F9BCA0B-1A4D-4326-8F77-C2BAD1136FF4",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":137,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A17AE294-EA71-43D8-914B-04A12D2898C2",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":139,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"19C20649-4B8D-43CF-A130-18202D43754A",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":141,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"6353F873-7D57-4501-B1A2-2B6F5652C843",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":143,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B949BE66-DD26-4B14-819D-AF583403E89B",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":145,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"95E85B39-1ABD-4E20-9F5D-25EAA93E8D25",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":147,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E336F810-C022-4928-BE76-A42654D6F512",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":149,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9D78A1BE-2836-4CC6-BD5E-63F58053194B",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":151,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5A8CB280-D822-40A8-86D2-038A1E8CA7D9",[],[],{"lastModified":10,"cacheTime":155,"version":156},1792372436626,"2.0",{"score":158,"band":159,"action":160,"scoredAt":161},46,"Medium","Plan remediation","2026-10-16T06:57:36.009098+00:00"]