CVE-2022-38466CWE-284
A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2)
published September 13, 2022
What it is
A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2). The default installation sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00169 · 5.9th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2022-09-13T09:40Z
EPSS history
Timeline