Vulnerability Description
OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Omicard Edm Project | Omicard Edm | >= 5.8, <= 6.0 |
Related Weaknesses (CWE)
References
- https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988fThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-6373-34d51-1.htmlThird Party Advisory
- https://www.chtsecurity.com/news/48032532-b2de-401c-97a8-a2be5691988fThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-6373-34d51-1.htmlThird Party Advisory
FAQ
What is CVE-2022-32965?
CVE-2022-32965 is a vulnerability with a CVSS score of 9.8 (CRITICAL). OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disr...
How severe is CVE-2022-32965?
CVE-2022-32965 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-32965?
Check the references section above for vendor advisories and patch information. Affected products include: Omicard Edm Project Omicard Edm.