Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.
References
Link | Resource |
---|---|
https://www.twcert.org.tw/tw/cp-132-6566-3805b-1.html | Third Party Advisory |
Configurations
Information
Published : 2022-09-27 21:15
Updated : 2022-09-29 06:30
NVD link : CVE-2022-39029
Mitre link : CVE-2022-39029
JSON object : View
CWE
CWE-863
Incorrect Authorization
Products Affected
lcnet
- smart_evision