CVE-2022-39030 — Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2

CVE-2022-39030

Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2 PUBLISHED

Description (CNA)

smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.

Affected (CNA)

Vendor / product	Versions
Smart eVision Information Technology Inc. / Smart eVision	affected 2022.02.21

CWE

CWE-200

References

https://www.twcert.org.tw/tw/cp-132-6567-01fa3-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6567-01fa3-1.html

CISA-ADP

No English description supplied.

No references supplied.