Podatność CVE-2022-46307
Publikacja: 2023-06-02

Opis:
SGUDA U-Lock central lock control service??s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks.

Typ:

CWE-863

 (Incorrect Authorization)

 Referencje:
https://www.twcert.org.tw/tw/cp-132-7099-e8897-1.html
Copyright 2024, cxsecurity.com

 

Back to Top