Lucene search
HistorySep 28, 2022 - 4:15 a.m.
CVE-2022-39029
smart evision
database query
authorization
vulnerability
sensitive information
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
47.1%
Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.
Affected configurations
Node
lcnetsmart_evisionRange≤2022.02.21
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lcnet | smart_evision | * | cpe:2.3:a:lcnet:smart_evision:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-39029
2022-09-28 04:15:14
cvelist
cvelist
prion
prion
Authorization
2022-09-28 04:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
47.1%
Related for NVD:CVE-2022-39029