CVE-2022-38355

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to

attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Dec 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-383568.8Cross-Site Request Forgery (CSRF) vulnerability in StylemixThemes WordPress Header Builder Plugin – Pearl plugin <= 1.3.4 versions.CVE-2022-383578.8Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the urlCVE-2022-383586.1Improper neutralization of input during web page generation leaves the Eyes of Network web application vulnerable to cross-site scripting atCVE-2022-383598.8Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of adequate protectionsCVE-2022-38364.8The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users suchCVE-2022-383628.8Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of coCVE-2022-383675.3The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated userCVE-2022-383688.8An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authenticatioCVE-2022-383698.8Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.CVE-2022-38374.8The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow high privilege users suCVE-2022-383707.5Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of databaCVE-2022-383717.5A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (