Lucene search
HistoryFeb 12, 2023 - 4:15 a.m.
CVE-2022-45088
input validation
local file inclusion
smartpower web
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
57.2%
Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion.This issue affects Smartpower Web: before 23.01.01.
Affected configurations
Node
grupargesmartpower_webRange<23.01.01
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gruparge | smartpower_web | * | cpe:2.3:a:gruparge:smartpower_web:*:*:*:*:*:*:*:* |
References
Related
prion
prion
Input validation
2023-02-12 04:15:00
cvelist
cvelist
CVE-2022-45088 Local File Inclusion in Smartpower Web
2023-02-08 18:50:07
cve
cve
CVE-2022-45088
2023-02-12 04:15:16
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
57.2%
Related for NVD:CVE-2022-45088