CVE-2022-39031

Smart eVision has insufficient authorization for task acquisition function. An unauthorized remote attacker can exploit this vulnerability to acquire the Session IDs of other general users only.

Score

CVSS 3.1 5.3 Medium

Status

Modified - twcert@cert.org.tw

Published

2022-09-28

Last modified

2025-05-21

Weaknesses

CWE-200, CWE-863

Affected products

• Smart Evision (Lcnet)
• Smart Evision (Smart Evision Information Technology Inc.)

References

• https://www.twcert.org.tw/tw/cp-132-6568-331c1-1.html