medium6.5
CVE-2022-39029
Smart eVision has inadequate authorization for the database query function.
Impact
Smart eVision has inadequate authorization for the database query function. A remote attacker with general user privilege, who is not explicitly authorized to access the information, can access sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lcnet | Smart Evision | through 2022.02.21 |