CVE-2022-1401

MEDIUM · CVSS 6.9 EPSS 18.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-08-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-1401

Severity

MEDIUM

CVSS

6.9

EPSS

18.00%

Original NVD Description

Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticated attacker to read sensitive server files with root permissions. This issue affects: Device42 CMDB versions prior to 18.01.00.