CVE-2022-39030: falha de alta gravidade em Smart eVision
Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.9%
smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Smart eVision Information Technology Inc. · Smart eVisionCVEs relacionadas — Smart eVision
No mesmo produto, das mais perigosas para as menos.
CVE-2022-39033CRITICALSmart eVision - Path Traversal -1EPSS 1.8%CVE-2022-39034MEDIUMSmart eVision - Path Traversal -2EPSS 1.5%CVE-2022-39032HIGHSmart eVision - Improper Privilege ManagementEPSS 0.9%CVE-2022-39029MEDIUMSmart eVision - Exposure of Sensitive Information to an Unauthorized Actor -1EPSS 0.8%CVE-2022-39031MEDIUMSmart eVision - Exposure of Sensitive Information to an Unauthorized Actor -3EPSS 0.7%CVE-2022-39035MEDIUMSmart eVision - Stored XSSEPSS 0.6%