CVE-2022-24036 HIGH

CVE-2022-24036: Unauthorized modification in Karmasis Informatics Infraskope SIEM+

Vendor Karmasis Informatics

Product Infraskope SIEM+

Weakness CWE-284

Published November 16, 2022

Last update May 20, 2026

CVSS base score

8.6/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

What the vulnerability does

01Description

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modificate logs.

Key dates

November 16, 2022 CVE published

May 20, 2026 Record updated

External resources

Related vulnerabilities