CVE-2022-39032CWE-269

Smart eVision - Improper Privilege Management

High · published September 28, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can exploit this vulnerability to escalate to administrator privilege, and then perform arbitrary system command or disrupt service.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00907 · 59.5th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-09-28T03:25Z
EPSS history
Timeline
  • 28 SEP 03:25Z
    Smart eVision - Improper Privilege Management
    cvelistv5