CVE-2022-40494 in NPS

Résumé

par MITRE • 07/10/2022

NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 11/09/2022
• Divulgation: 07/10/2022
• Modérer: accepté
• Entrée: VDB-210249
• CPE: prêt
• CWE: CWE-287 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.08160
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-40494
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-40494
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-40494/