CVE-2022-39811: Critical severity italtel netmatch-s ci vulnerability

Published Jan 27, 2023

Updated

Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader. By not verifying permissions for access to resources, it allows an attacker to view pages that are not allowed, and modify the system configuration, bypassing all controls (without checking for user identity).

Affected Software

1 affected component

Italtel NetMatch-S CI=5.2.0-20211008

Event History

Jan 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-39811?

CVE-2022-39811 has been classified with a high severity due to its potential for unauthorized access and configuration modification.

How do I fix CVE-2022-39811?

Fixing CVE-2022-39811 involves updating the Italtel NetMatch-S CI software to a version that addresses the access control vulnerabilities.

What are the consequences of exploiting CVE-2022-39811?

Exploiting CVE-2022-39811 can allow an attacker to gain unauthorized access to restricted pages and modify critical system settings.

Who is affected by CVE-2022-39811?

Users and organizations using Italtel NetMatch-S CI version 5.2.0-20211008 are affected by CVE-2022-39811.

Is there a workaround for CVE-2022-39811?

Currently, there is no documented workaround for CVE-2022-39811, and an upgrade is recommended to mitigate the vulnerabilities.