Lucene search
HistoryAug 04, 2022 - 10:15 a.m.
CVE-2022-32965
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
74.9%
OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.
Affected configurations
Node
omicard_edm_projectomicard_edmRange5.8–6.0
Related
cvelist
cvelist
CVE-2022-32965 ITPison OMICARD EDM - Use of Hard-coded Credentials
2022-08-04 00:00:00
cve
cve
CVE-2022-32965
2022-08-04 10:15:08
prion
prion
Hardcoded credentials
2022-08-04 10:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
74.9%
Related for NVD:CVE-2022-32965