CVE-2022-29518

🗓️ 18 May 2022 09:50:26Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 76 Views

CVE-2022-29518: Improper authentication check in Screen Creator Advance2 and HMI GC-A2 series may lead to unauthorized access and operations

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-29518	18 May 202215:15	–	attackerkb
Circl	CVE-2022-29518	18 May 202218:28	–	circl
CNNVD	Koyo Electronics Industries Screen Creator Advance 2 安全漏洞	9 May 202200:00	–	cnnvd
Cvelist	CVE-2022-29518	18 May 202209:50	–	cvelist
EUVD	EUVD-2022-33855	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#50337155: KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass	9 May 202200:00	–	jvn
Japan Vulnerability Notes	KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass	9 May 202205:43	–	jvn
NVD	CVE-2022-29518	18 May 202215:15	–	nvd
Prion	Authentication flaw	18 May 202215:15	–	prion
Positive Technologies	PT-2022-19674 · Unknown +1 · Hmi Gc-A2 Series +2	18 May 202200:00	–	ptsecurity

NVD

Node

koyoele remote_gcMatch-

koyoele screen_creator_advance_2Range<0.1.1.3

koyoele screen_creator_advance_2Match0.1.1.3-

Node

koyoele gc-a22w-cw_firmwareMatch-

AND

koyoele gc-a22w-cwMatch-

Node

koyoele gc-a24_firmwareMatch-

AND

koyoele gc-a24Match-

Node

koyoele gc-a24-m_firmwareMatch-

AND

koyoele gc-a24-mMatch-

Node

koyoele gc-a24w-c(w)_firmwareMatch-

AND

koyoele gc-a24w-c(w)Match-

Node

koyoele gc-a25_firmwareMatch-

AND

koyoele gc-a25Match-

Node

koyoele gc-a26_firmwareMatch-

AND

koyoele gc-a26Match-

Node

koyoele gc-a26-j2_firmwareMatch-

AND

koyoele gc-a26-j2Match-

Node

koyoele gc-a26w-c(w)_firmwareMatch-

AND

koyoele gc-a26w-c(w)Match-

[
  {
    "product": "Screen Creator Advance2, HMI GC-A2 series, and Real time remote monitoring and control tool",
    "vendor": "KOYO ELECTRONICS INDUSTRIES CO., LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "Screen Creator Advance2 versions prior to Ver.0.1.1.3 Build01, HMI GC-A2 series(GC-A22W-CW, GC-A24W-C(W), GC-A26W-C(W), GC-A24, GC-A24-M, GC-A25, GC-A26, and GC-A26-J2), and Real time remote monitoring and control tool(Remote GC)"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN50337155/index.html
koyoele	www.koyoele.co.jp/en/topics/202205095016/

21 Nov 2024 06:59Current

7High risk

Vulners AI Score7

CVSS 25.9

CVSS 3.17

EPSS0.00042