CVE-2022-2338

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Softing Secure Integration Server V1.22 is vulnerable to authentication bypass via a machine-in-the-middle attack. The default the administration interface is accessible via plaintext HTTP protocol, facilitating the attack. The HTTP request may contain the session cookie in the request, which may be captured for use in authenticating to the server.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published: Aug 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-233808.8There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit.CVE-2022-233828.1Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted mu CVE-2022-233839.1YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is CVE-2022-233848.8YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add CVE-2022-233877.5An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field.CVE-2022-233899.8PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.CVE-2022-23397.5With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack c CVE-2022-233909.8An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.CVE-2022-233916.1A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload ins CVE-2022-233956.1jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).CVE-2022-233976.1The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly sanitize data sent CVE-2022-233999.8A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.