CVE-2022-24037: Unauthorized modification in Karmasis Informatics Infraskope SIEM+

Published Nov 18, 2022

Updated

Karmasis Informatics Infraskope SIEM+

has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.

Affected Software

2 affected components

Karmasis Infraskope Security Event Manager<7.10.00

Karmasis Infraskope Siem\+<7.10.00

Remediation

Information

Update the Karmasis Informatics Infraskope SIEM+ software to >= 7.10.xx.

Event History

Nov 18, 2022

CVE Published

via MITRE·07:15 AM

Data Sourced

via MITRE·07:15 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-24037?

CVE-2022-24037 is a vulnerability in Karmasis Informatics Infraskope SIEM+ that allows unauthenticated access, potentially enabling an attacker to obtain critical information.

How severe is CVE-2022-24037?

CVE-2022-24037 has a severity score of 8.2, which is considered high.

Which software versions are affected by CVE-2022-24037?

CVE-2022-24037 affects Karmasis Informatics Infraskope Security Event Manager versions up to (but not including) 7.10.00.

How can an attacker exploit CVE-2022-24037?

An unauthenticated attacker can exploit CVE-2022-24037 to gain unauthorized access and retrieve critical information.

Are there any references for CVE-2022-24037?

Yes, you can find more information about CVE-2022-24037 at the following references: [Reference 1](https://karmasis.com/urunlerimiz/infraskope-siem/) and [Reference 2](https://www.usom.gov.tr/bildirim/tr-22-0691).