9.8
CVE-2022-32965
- EPSS 1.14%
- Veröffentlicht 04.08.2022 10:15:08
- Zuletzt bearbeitet 21.11.2024 07:07:19
- Quelle twcert@cert.org.tw
- CVE-Watchlists
- Unerledigt
LoginITPison OMICARD EDM - Use of Hard-coded Credentials
OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Omicard Edm Project ≫ Omicard Edm Version >= 5.8 <= 6.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.14% | 0.624 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| twcert@cert.org.tw | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988f
https://www.twcert.org.tw/tw/cp-132-6373-34d51-1.html