CVE-2022-26643 : An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in

An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application.

Published 2022-04-13 14:15:09

Updated 2022-04-20 17:54:26

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2022-26643

Johnsoncontrols » Easyio Cpt Graphics » Version: 0.8
cpe:2.3:a:johnsoncontrols:easyio_cpt_graphics:0.8:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.12%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

https://gist.github.com/rvismit/3fd33b47a753e1b7065421f42b2dd496

CVE-2022-26643 · GitHub
Exploit;Third Party Advisory
http://cpt.com

Broken Link
http://easyio.com

EasyIO Europe | THINK BEYOND | Taking Buildings into the Future
Product;Vendor Advisory

Jump to