CVE-2022-32528CWE-306

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project…

High · published January 30, 2023

CVSS v3.1
8.6
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could

cause access to manipulate and read specific files in the IGSS project report directory,

potentially leading to a denial-of-service condition when an attacker sends specific messages.

Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2023-01-30T00:00Z
EPSS history
Timeline
  • 30 JAN 00:00Z
    A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project…
    cvelistv5