Lucene search
HistoryOct 21, 2022 - 4:15 p.m.
CVE-2022-1070
aethon tug server
unauthenticated access
hashed credentials
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.0%
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.
Affected configurations
Node
aethontug_home_base_serverRange<24
Related
cvelist
cvelist
CVE-2022-1070 CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300
2022-04-12 00:00:00
prion
prion
Default credentials
2022-10-21 16:15:00
cve
cve
CVE-2022-1070
2022-10-21 16:15:10
thn
thn
JekyllBot:5 Flaws Let Attackers Take Control of Aethon TUG Hospital Robots
2022-04-15 11:51:00
ics
ics
Aethon TUG Home Base Server
2022-04-12 12:00:00
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
57.0%
Related for NVD:CVE-2022-1070