Lucene search

K
cve[email protected]CVE-2022-1066
HistoryOct 21, 2022 - 4:15 p.m.

CVE-2022-1066

2022-10-2116:15:10
CWE-862
web.nvd.nist.gov
31
4
cve-2022-1066
aethon tug
home base server
unauthenticated access
vulnerability
nvd

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Affected configurations

NVD
Node
aethontug_home_base_serverRange<24

CNA Affected

[
  {
    "vendor": "Aethon",
    "product": "TUG Home Base Server",
    "versions": [
      {
        "version": "All versions",
        "status": "affected",
        "lessThan": "24",
        "versionType": "custom"
      }
    ]
  }
]

Social References

More

8.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

Related for CVE-2022-1066