CVE-2022-22056

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
Le-yan Co., Ltd.	Dental Management System	2.8.5

References

https://www.twcert.org.tw/tw/cp-132-5510-45d71-1.htmlThird Party Advisory
https://www.twcert.org.tw/tw/cp-132-5510-45d71-1.htmlThird Party Advisory

Timeline

Published: Jan 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-220577.8Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in CVE-2022-220587.8Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2022-220597.8Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd CVE-2022-22067.8Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-220607.5Assertion occurs while processing Reconfiguration message due to improper validation CVE-2022-220617.8Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Sna CVE-2022-220629.1An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snap CVE-2022-220637.8Memory corruption in Core due to improper configuration in boot remapper.CVE-2022-220647.5Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi CVE-2022-220657.5Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,CVE-2022-220667.8Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Sn CVE-2022-220677.8Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdra