CVE-2022-39989

CVSS 9.8 CRITICALEPSS 0.8%CWE-798

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

26 Apr 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administrators to change the credentials.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://gist.github.com/0xHop/43c4da65e0d101328a46b1bd5a11b262 https://gist.github.com/0xHop/6ed962a1978edb1bd620c9c487400403 https://www.sourcecodester.com/php/12824/fighting-cock-information-system.html