CVE-2022-36874CWE-280

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and…

Medium · published September 9, 2022

CVSS v3.1
5.9
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2022-09-09T14:40Z
EPSS history
Timeline
  • 09 SEP 14:40Z
    Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and…
    cvelistv5