by Kastro
Paper/Archive/CVE-2022-39042

CVE-2022-39042

aEnrich a+HRD — aEnrich a+HRD - Improper Authentication

EPSS 2%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.4.744 × 2014.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

aEnrich a+HRD has improper validation for login function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and access API function to perform arbitrary system command or disrupt service.

Affected

ProductAffectedFixed inSource
a+HRD6.8 – 7.0–CNA

Scores by source

twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reftwcert.org.tw/tw/cp-132-6795-f7fe6-1.html