CVE-2022-24581

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC

published May 27, 2022

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, an attacker can induce the victim server to disclose the username and password hash of the user executing the ACEweb Online software.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00974 · 61.7th percentile
Published
2022-05-27T18:29Z
EPSS history
Timeline
  • 27 MAY 18:29Z
    ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC
    cvelistv5