CVE-2022-38351 HIGH

CVE-2022-38351

Vendor N/A
Product n/a
Published September 19, 2022
Last update May 29, 2025

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N

What the vulnerability does

01Description

A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page.

Key dates

02Disclosure timeline

September 19, 2022 CVE published
May 29, 2025 Record updated