CVE-2022-31765CWE-862

Affected devices do not properly authorize the change password function of the web interface

High · published October 11, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

Affected devices do not properly authorize the change password function of the web interface.

This could allow low privileged users to escalate their privileges.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01092 · 65.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-10-11T00:00Z
EPSS history
Timeline
  • 11 OCT 00:00Z
    Affected devices do not properly authorize the change password function of the web interface
    cvelistv5