What’s Vulnerable › Vulnerabilities

CVE-2022-38161

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-11 · updated 2026-06-17
• Weakness: CWE-119

Description

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA.

Affected products

• Gumstix Overo Sbc: through 2022-08-09

References

• https://github.com/subreption/birdwatch-report-1-repo
• https://subreption.com/downloads/reports/demystifying-the-orlan-10_opt.pdf
• https://subreption.com/press-releases/2022-birdwatch-first-report/
• https://github.com/subreption/birdwatch-report-1-repo
• https://subreption.com/downloads/reports/demystifying-the-orlan-10_opt.pdf
• https://subreption.com/press-releases/2022-birdwatch-first-report/

Get alerted when CVE-2022-38161 or the next vulnerability affects your stack