Vulnerability Details CVE-2022-23765
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.8%
CVSS Severity
CVSS v3 Score 8.0
References
Products affected by CVE-2022-23765
-
cpe:2.3:h:iptime:nas1dual:-
-
cpe:2.3:h:iptime:nas2dual:-
-
cpe:2.3:h:iptime:nas4dual:-
-
cpe:2.3:o:iptime:nas1dual_firmware:-
-
cpe:2.3:o:iptime:nas2dual_firmware:-
-
cpe:2.3:o:iptime:nas4dual_firmware:-