First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-24037

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Karmasis Informatics Infraskope SIEM+

has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Karmasis Informatics	Infraskope SIEM+	< 7.10.xx

References

https://karmasis.com/urunlerimiz/infraskope-siem/Product
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0691
https://www.usom.gov.tr/bildirim/tr-22-0691Third Party Advisory
https://karmasis.com/urunlerimiz/infraskope-siem/Product
https://www.usom.gov.tr/bildirim/tr-22-0691Third Party Advisory

Timeline

Published: Nov 18, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-240386.5Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to damage t CVE-2022-240399.0A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). T CVE-2022-24046.1The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading t CVE-2022-240406.5A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PX CVE-2022-240416.5A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PX CVE-2022-240429.1A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PX CVE-2022-240435.3A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PX CVE-2022-240447.5A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PX CVE-2022-240456.5A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PX CVE-2022-240468.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 CVE-2022-240479.8This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication CVE-2022-240487.8MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to