CVE-2022-28719

2022-04-2808:25:12

jpcert

www.cve.org

10 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the managed clients to execute arbitrary code with the administrative privilege.

CNA Affected

[
  {
    "product": "AssetView",
    "vendor": "Hammock Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "prior to Ver.13.2.0"
      }
    ]
  }
]