CVE-2022-25594 MEDIUM

CVE-2022-25594: Microprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor

Vendor Microprogram
Product parking lot management system
Weakness CWE-200 · Info exposure
Published April 7, 2022
Last update September 16, 2024

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information.

Key dates

02Disclosure timeline

April 7, 2022 CVE published
September 16, 2024 Record updated