What’s Vulnerable › Vulnerabilities

CVE-2022-46397

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-28 · updated 2026-06-17
• Weakness: CWE-329

Description

FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.

Affected products

• lfprojects Vector Packet Processor: 19.04, 19.08, 20.01, 20.05, 20.09, 21.01 (+5)

References

• https://lists.fd.io/g/security-announce/message/2
• https://s3-docs.fd.io/vpp/23.02/
• https://lists.fd.io/g/security-announce/message/2
• https://s3-docs.fd.io/vpp/23.02/

Get alerted when CVE-2022-46397 or the next vulnerability affects your stack