by Kastro
Paper/Archive/CVE-2022-22056

CVE-2022-22056

Le-yan Co., Ltd. Dental Management System — Le-yan Co., Ltd. dental management system - Hard-coded Credentials

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 83.0.830 × 2016.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service.

Affected

ProductAffectedFixed inSource
Dental Management System2.8.5–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reftwcert.org.tw/tw/cp-132-5510-45d71-1.html