Critical · published June 14, 2022
🚨 An attacker can gain administrative access without even breaking a sweat! With CVE-2022-30230, SICAM GridEdge (Classic) versions below 2.6.6 are wide open—no password required! 🔥 Think of it like a hotel with an open back door that lets anyone stroll in and access the VIP lounge—no check-in desk needed. This vulnerability allows anyone off the street to create new admin users, effectively turning them into the hotel manager! This is absolutely devastating! An unauthorized individual could create a new admin user and gain full control over your system, potentially leading to data breaches, unauthorized changes, and even service disruptions. It’s like giving a thief the keys to your entire operation!
Think of it like a hotel with an open back door that lets anyone stroll in and access the VIP lounge—no check-in desk needed. This vulnerability allows anyone off the street to create new admin users, effectively turning them into the hotel manager! The vulnerability allows unauthenticated users to perform privileged functions, granting them the ability to create a new user with administrative permissions in SICAM GridEdge (Classic) versions prior to 2.6.6.
This is absolutely devastating! An unauthorized individual could create a new admin user and gain full control over your system, potentially leading to data breaches, unauthorized changes, and even service disruptions. It’s like giving a thief the keys to your entire operation! To secure your system, upgrade to version 2.6.6 or later immediately! Additionally, review your user access protocols to ensure no unauthorized access can happen in the future. Don't leave the door wide open! You've got this! Take those steps and lock down your system like the security hero you are! 🛡️