Vulnerability Details CVE-2022-38351
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.8%
CVSS Severity
CVSS v3 Score 8.8
References
- https://nobugescapes.com/blog/privilege-escalation-from-user-operator-to-system-administrator/
- https://nobugescapes.com/wp-content/uploads/2022/08/Part1.docx
- https://nobugescapes.com/blog/privilege-escalation-from-user-operator-to-system-administrator/
- https://nobugescapes.com/wp-content/uploads/2022/08/Part1.docx
Products affected by CVE-2022-38351
-
cpe:2.3:a:supremainc:biostar_2:2.8.16