CVE & CISA-KEV Catalog

CVE-2022-34888

LOW
2.7
CVSS v3
NVD

Description

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

How to fix

Remediation Available
thinkagile hx1021 firmwareNVD
Affected:< 3.60_tei386mFixed in:3.60_tei386mCVE-2022-34888derived from NVD
thinkagile hx1320 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx1321 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx1520-r firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx1521-r firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx2320-e firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx2321 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx2720-e firmwareNVD
Affected:< 5.20_tei3c8mFixed in:5.20_tei3c8mCVE-2022-34888derived from NVD
thinkagile hx3320 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx3321 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx3375 firmwareNVD
Affected:< 4.10_d8bt38lFixed in:4.10_d8bt38lCVE-2022-34888derived from NVD
thinkagile hx3376 firmwareNVD
Affected:< 4.10_d8bt38lFixed in:4.10_d8bt38lCVE-2022-34888derived from NVD
thinkagile hx3520-g firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx3521-g firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx3720 firmwareNVD
Affected:< 5.20_tei3c8mFixed in:5.20_tei3c8mCVE-2022-34888derived from NVD
thinkagile hx3721 firmwareNVD
Affected:< 5.20_tei3c8mFixed in:5.20_tei3c8mCVE-2022-34888derived from NVD
thinkagile hx5520-c firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx5520 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx5521-c firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx5521 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx7520 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx7521 firmwareNVD
Affected:< 8.40-cdi394nFixed in:8.40-cdi394nCVE-2022-34888derived from NVD
thinkagile hx7820 firmwareNVD
Affected:< 2.50_psi346lFixed in:2.50_psi346lCVE-2022-34888derived from NVD
thinkagile hx7821 firmwareNVD
Affected:< 2.50_psi346lFixed in:2.50_psi346lCVE-2022-34888derived from NVD
thinkagile hx enclosure certified node firmwareNVD
Affected:< 5.20_tei3c8mFixed in:5.20_tei3c8mCVE-2022-34888derived from NVD
thinkagile mx1021 firmwareNVD
Affected:< 3.60_tei386mFixed in:3.60_tei386mCVE-2022-34888derived from NVD
thinkagile mx3330-f firmwareNVD
Affected:< 1.80_afbt20nFixed in:1.80_afbt20nCVE-2022-34888derived from NVD
thinkagile mx3330-h firmwareNVD
Affected:< 1.80_afbt20nFixed in:1.80_afbt20nCVE-2022-34888derived from NVD
thinkagile mx3331-f firmwareNVD
Affected:< 1.80_afbt20nFixed in:1.80_afbt20nCVE-2022-34888derived from NVD
thinkagile mx3331-h firmwareNVD
Affected:< 1.80_afbt20nFixed in:1.80_afbt20nCVE-2022-34888derived from NVD

This vulnerability affects an unusually large number of packages. The highest-confidence fixes are shown above; the full list is longer. Check the referenced advisories for complete coverage.

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Exploit Intelligence

0.41%probability of exploitation in 30 days
34thpercentile

Low risk: more likely to be exploited than 34% of all known CVEs.

References

Vendor Advisory1

Related Vulnerabilities

Other CWE-184 vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2024-5217Critical9.8100%KEV-
CVE-2022-43396High8.855%-Fix
CVE-2017-7525Critical9.838%-Fix
CVE-2024-5178Medium4.934%--
CVE-2018-7489Critical9.820%-Fix
CVE-2018-6383High8.813%--

Common questions

How do I fix CVE-2022-34888?

Published advisories record a fix for 97 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.

Is CVE-2022-34888 being actively exploited?

Not that we know of. CVE-2022-34888 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 0.41% is the estimated probability that it will be exploited in the next 30 days. That is higher than 34% of all scored CVEs.

How severe is CVE-2022-34888?

CVE-2022-34888 has a CVSS v3 base score of 2.7, rated low. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

What does CVE-2022-34888 affect?

Published advisories record a fix for thinkagile hx1021 firmware (NVD), thinkagile hx1320 firmware (NVD), thinkagile hx1321 firmware (NVD), thinkagile hx1520-r firmware (NVD), and 93 more. Only products with a sourced advisory are listed, so treat this as what we can cite rather than a complete inventory.

Embed a live status badge for CVE-2022-34888
CVE-2022-34888 severity badge

Markdown

[![CVE-2022-34888](https://tridentstack.com/cve/badge/CVE-2022-34888.svg)](https://tridentstack.com/cve/CVE-2022-34888)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-34888"><img src="https://tridentstack.com/cve/badge/CVE-2022-34888.svg" alt="CVE-2022-34888"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it worksStart freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.