CVE-2022-39032 — Smart eVision - Improper Privilege Management

CVE-2022-39032

Smart eVision - Improper Privilege Management PUBLISHED

Description (CNA)

Smart eVision has an improper privilege management vulnerability. A remote attacker with general user privilege can exploit this vulnerability to escalate to administrator privilege, and then perform arbitrary system command or disrupt service.

Affected (CNA)

Vendor / product	Versions
Smart eVision Information Technology Inc. / Smart eVision	affected 2022.02.21

CWE

CWE-269

References

https://www.twcert.org.tw/tw/cp-132-6569-9fcf4-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6569-9fcf4-1.html

CISA-ADP

No English description supplied.

No references supplied.