critical9.8
CVE-2022-40494
NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameter…
Impact
NPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via constantly generating and sending the Auth key and Timestamp parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ehang-Io | Nps | from 0.19.0 through 0.26.10 |