CVE-2022-48474

Control de Ciber, version 1.650, is affected by a Denial of Service via the version function. An unauthenticated remote attacker can craft a malicious request that makes the server check if an unrecognized component is up to date, causing a memory failure and crashing the process. Several sources...

CVE-2022-48475

CVE-2022-48475 is a buffer-overflow vulnerability in Control de Ciber 1.650’s printing function. A modified request can trigger a crash when an administrator accepts or deletes a print query, as described in multiple sources. Public PoCs/Exploits exist (e.g., a GitHub project with bof_print.py), ...

CVE-2022-4896

CVE-2022-4896 concerns Cyber Control, v1.650, where the server-side generation of pop-up windows for specific messages (PNTMEDIDAS, PEDIR, HAYDISCOA, SPOOLER) can be overwhelmed by concurrent requests, causing a complete denial of service on a core. Concrete details in connected records confirm a...