medium5.3
CVE-2022-42892
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01).
Impact
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow directory listing in any folder accessible to the account assigned to the website’s application pool.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Syngo Dynamics Cardiovascular Imaging And Information System | before va40g_hf01 |