CVE-2022-39030
Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
28 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Smart eVision Information Technology Inc. · Smart eVisionWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →