CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-45778

https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 <= 5.0.4.0 is vulnerable to Incorrect Access Control. There is a permission bypass vulnerability in the Hillstone WEB application firewall. An attacker can enter the background of the firewall with super administrator privileges through a configuration error in report.m.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 5.4%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2022-45778

Hillstonenet » Sc-6000-Wv02 » Version: N/A

cpe:2.3:h:hillstonenet:sc-6000-wv02:-
Hillstonenet » Sc-6000-Wv04 » Version: N/A

cpe:2.3:h:hillstonenet:sc-6000-wv04:-
Hillstonenet » Sc-6000-Wv08 » Version: N/A

cpe:2.3:h:hillstonenet:sc-6000-wv08:-
Hillstonenet » Sc-6000-Wv12 » Version: N/A

cpe:2.3:h:hillstonenet:sc-6000-wv12:-
Hillstonenet » Sc-6000-Wv02 Firmware » Version: N/A

cpe:2.3:o:hillstonenet:sc-6000-wv02_firmware:-
Hillstonenet » Sc-6000-Wv02 Firmware » Version: 5.0.4.0

cpe:2.3:o:hillstonenet:sc-6000-wv02_firmware:5.0.4.0
Hillstonenet » Sc-6000-Wv04 Firmware » Version: N/A

cpe:2.3:o:hillstonenet:sc-6000-wv04_firmware:-
Hillstonenet » Sc-6000-Wv04 Firmware » Version: 5.0.4.0

cpe:2.3:o:hillstonenet:sc-6000-wv04_firmware:5.0.4.0
Hillstonenet » Sc-6000-Wv08 Firmware » Version: N/A

cpe:2.3:o:hillstonenet:sc-6000-wv08_firmware:-
Hillstonenet » Sc-6000-Wv08 Firmware » Version: 5.0.4.0

cpe:2.3:o:hillstonenet:sc-6000-wv08_firmware:5.0.4.0
Hillstonenet » Sc-6000-Wv12 Firmware » Version: N/A

cpe:2.3:o:hillstonenet:sc-6000-wv12_firmware:-
Hillstonenet » Sc-6000-Wv12 Firmware » Version: 5.0.4.0

cpe:2.3:o:hillstonenet:sc-6000-wv12_firmware:5.0.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-45778

Products

Pricing

Contact Us