Dashboard / CVE-2022-48564

CVE-2022-48564

MEDIUM
MEDIUM Priority: 0.11 BB Relevance: 63/100
Published: 2023-08-22 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Unchanged
C: None
I: None
A: High

Description

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
n/a n/a n/a
netapp active_iq_unified_manager -
netapp active_iq_unified_manager -
python python < 3.6.13

References & Advisories (3)

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

1.65%
Raw Score 0.016510
Percentile 76.6%
Date 2026-11-05

EPSS Trend

2026-11-05
0.01651
2026-11-04
0.01651
2026-11-03
0.01651
2026-11-02
0.01651

Intelligence Sources

mitre ref →
nvd ref →

External Links