CVE-2022-45124 - An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05

Back Back to CVE browser

HIGH

An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05

Published Mar 20, 2023

7.5

HIGH

CVSS 3.1

EPSS 13.45%

Description

An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability.

Affected products

Vendor WellinTech Product KingHistorian Default
n/a
- Version
  35.01.00.05
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

WellinTech

KingHistorian

n/a

Version	Status	Constraints
35.01.00.05	affected	-

Vendor Wellintech Product Kinghistorian Default
n/a
- Version
  35.01.00.05
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Wellintech

Kinghistorian

n/a

Version	Status	Constraints
35.01.00.05	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-287

Improper Authentication

References (2)

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1683
ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1683

Link	Providers	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1683		ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1683