CVE-2022-4779highCWE-22

CVE-2022-4779: high-severity vulnerability in elvexys StreamX

authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature

Published · Updated

Follow this CVE+ Monitor StreamX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.3%
StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme. StreamX applications using StreamView HTML component with the public web server feature activated are affected.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
elvexys · StreamX
Related CVEs — elvexys StreamX

In the same product, most dangerous first.

CVE-2022-4778MEDIUMpath traversal in elvexys StreamX using StreamView HTML component with public web server featureEPSS 0.7%