by Kastro
Paper/Archive/CVE-2022-34907

CVE-2022-34907

mitre — An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2.

EPSS 16%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.0.970 × 2019.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to gain access to the system with the highest authority possible and gain full control over the FileWave platform.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refkb.filewave.com/pages/viewpage.action?pageId=55544244refclaroty.com/2022/07/25/blog-research-with-management-comes-risk-finding-flaws-in-filewave-mdm