CVE-2022-27494

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Oct 21, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-274956.5On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: SoftwareCVE-2022-274966.1Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unCVE-2022-274977.5Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allCVE-2022-274986.5A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10CVE-2022-274994.4Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable inCVE-2022-27509.8A vulnerability, which was classified as critical, was found in SourceCodester Company Website CMS. Affected is an unknown function of the fCVE-2022-275005.5Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enCVE-2022-275027.8RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% fCVE-2022-275036.1Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9CVE-2022-275056.1Reflected cross site scripting (XSS)CVE-2022-275062.7Hard-coded credentials allow administrators to access the shell via the SD-WAN CLICVE-2022-275076.5Authenticated denial of service
CVE-2022-27494: Medium severity, CVSS 5.4 | Vulnix