Security Advisory

CVE-2022-45124

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-20 20:16:01
Last updated 2024-08-03 14:01:31
Assigner talos
CVSS score 7.5
State PUBLISHED

Description

An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability.