CVE-2022-39033
Smart eVision - Path Traversal -1
Vexday Risk Score
28Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 9.8EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
28 sep 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restricted paths to download and delete arbitrary system files to disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Smart eVision Information Technology Inc. · Smart eVision¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →