CVE-2022-39033

🗓️ 28 Sep 2022 03:25:38Reported by twcertType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 43 Views

Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restricted paths to download and delete arbitrary system files to disrupt service

Reporter	Title	Published	Views	Family All 8
CNNVD	Smart eVision 路径遍历漏洞	28 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-39033 Smart eVision - Path Traversal -1	28 Sep 202203:25	–	cvelist
EUVD	EUVD-2022-41579	3 Oct 202520:07	–	euvd
NVD	CVE-2022-39033	28 Sep 202204:15	–	nvd
OSV	CVE-2022-39033	28 Sep 202204:15	–	osv
Prion	Path traversal	28 Sep 202204:15	–	prion
Positive Technologies	PT-2022-4942 · Unknown · Smart Evision	28 Sep 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-39033 Smart eVision - Path Traversal -1	28 Sep 202203:25	–	vulnrichment

NVD

Vulners

Node

lcnet smart_evisionMatch2022.02.21

[
  {
    "product": "Smart eVision",
    "vendor": "Smart eVision Information Technology Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "2022.02.21"
      }
    ]
  }
]