« Volver al listado

CVE-2022-38392

Estado: ModificadaMedia (5.3)—

Ciertos discos duros de 5400 RPM, para ordenadores portátiles y otros PC de aproximadamente 2005 y posteriores, permiten a los atacantes físicamente próximos provocar una denegación de servicio (mal funcionamiento del dispositivo y caída del sistema) mediante un ataque de frecuencia resonante con la señal de audio del vídeo musical Rhythm Nation. Un producto reportado es Seagate STDT4000100 763649053447

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

5400rmp OEM Harddrive — 5400rmp OEM Harddrive

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-38392",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@mitre.org",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 0.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-08-17T18:15:08.297",
  "references": [
    {
      "url": "https://devblogs.microsoft.com/oldnewthing/20220816-00/?p=106994",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.seagate.com/support/security/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.youtube.com/watch?v=nSvu9IDUjZw&t=416s",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://devblogs.microsoft.com/oldnewthing/20220816-00/?p=106994",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.seagate.com/support/security/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.youtube.com/watch?v=nSvu9IDUjZw&t=416s",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported product is Seagate STDT4000100 763649053447."
    },
    {
      "lang": "es",
      "value": "Ciertos discos duros de 5400 RPM, para ordenadores portátiles y otros PC de aproximadamente 2005 y posteriores, permiten a los atacantes físicamente próximos provocar una denegación de servicio (mal funcionamiento del dispositivo y caída del sistema) mediante un ataque de frecuencia resonante con la señal de audio del vídeo musical Rhythm Nation. Un producto reportado es Seagate STDT4000100 763649053447"
    }
  ],
  "lastModified": "2026-06-17T04:56:31.203",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:*:5400rmp_oem_harddrive:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5517E28-B2E8-41A9-A3F2-425A650E38BF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Due to the lack of publicly available information regarding any specific targeted products for this vulnerability, we are unable to provide a legitimate CPE value for this CVE's configuration.   ",
  "sourceIdentifier": "cve@mitre.org"
}