CVE-2022-1066

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Weakness enumeration

CWE-862CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Oct 21, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-10676.5Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and CVE-2022-10687.5Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may causCVE-2022-10697.5A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22CVE-2022-10708.1Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credeCVE-2022-10718.2User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.CVE-2022-10739.8A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalatiCVE-2022-10745.4A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi setCVE-2022-10755.4A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/cCVE-2022-10766.1A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqCVE-2022-10777.5A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the compoCVE-2022-10789.8A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file CVE-2022-10796.1A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and par
CVE-2022-1066: High severity, CVSS 8.2 | Vulnix