CVE-2022-3091 HIGH

CVE-2022-3091

Vendor Ronds
Product Equipment Predictive Maintenance Solution
Weakness CWE-200 · Info exposure
Published January 17, 2023
Last update January 16, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials. In some circumstances, an attacker can exploit this vulnerability to execute operating system (OS) commands.

Key dates

02Disclosure timeline

January 17, 2023 CVE published
January 16, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-5075 All in One SEO <= 4.9.7 - Authenticated (Contributor+) Sensitive Information Exposure via 'internalOptions' Localized Script Data CVE-2019-1589 Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot Vulnerability CVE-2024-24898 Information Leakage in kernel CVE-2022-31177 Possible to infer sensitive information through query strings in Flask-AppBuilder CVE-2023-52151 WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure