CVE-2022-39030
Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2
- State
- Published
- Severity
- 7.5 High
- Published
- Sep 28, 2022
- Updated
- May 21, 2025
- Reserved
- Aug 30, 2022
Description
smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | twcert |
Weaknesses
- CWE-200 Information Exposure
Affected Products
| Product | Versions |
|---|---|
Smart eVisionSmart eVision Information Technology Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.