Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-32965

ITPison OMICARD EDM - Use of Hard-coded Credentials

Description

OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ITPison OMICARD EDM

  • 5.8 to ≤ 6.0affected

References