8.6
Élevée
CVE-2022-32528 A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and…
Description
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project report directory, potentially leading to a denial-of-service condition when an attacker sends specific messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| IGSS Data Server (IGSSdataServer.exe) 15.0 | premières → < 15.0.0.22170 | 15.0.0.22170 |
Autres CVE de IGSS Data Server (IGSSdataServer.exe)
Les 10 CVE de IGSS Data Server (IGSSdataServer.exe) →
CVE-2022-24324
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer…
9.8
Critique
CVE-2022-2329
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to…
9.8
Critique
CVE-2022-32522
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer…
9.8
Critique
CVE-2022-32523
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer…
9.8
Critique