Lucene search

K
cvelistMitreCVELIST:CVE-2022-23178
HistoryJan 15, 2022 - 2:40 p.m.

CVE-2022-23178

2022-01-1514:40:25
mitre
www.cve.org
2
crestron hd-md4x2-4k-e
unauthenticated access
user credentials disclosure

AI Score

9.7

Confidence

High

EPSS

0.034

Percentile

91.6%

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname and upassword fields.

AI Score

9.7

Confidence

High

EPSS

0.034

Percentile

91.6%

Related for CVELIST:CVE-2022-23178