Skip to content
Sign in
8.6 High

CVE-2022-32528 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and…

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project report directory, potentially leading to a denial-of-service condition when an attacker sends specific messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)

Affected products and versions

Product Affected versions Fixed in
IGSS Data Server (IGSSdataServer.exe) 15.0 earliest → < 15.0.0.22170 15.0.0.22170

Other CVEs of IGSS Data Server (IGSSdataServer.exe)

The 10 CVEs of IGSS Data Server (IGSSdataServer.exe) →
CVE-2022-24324 A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer… 9.8 Critical CVE-2022-2329 A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to… 9.8 Critical CVE-2022-32522 A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer… 9.8 Critical CVE-2022-32523 A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer… 9.8 Critical
Track this CVE