CVE-2022-46309

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jan 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-46316.1A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The CVE-2022-463107.5The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentCVE-2022-463117.5The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integritCVE-2022-463127.5The application management module has a vulnerability in permission verification. Successful exploitation of this vulnerability causes unexpCVE-2022-463135.3The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of theCVE-2022-463147.5The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.CVE-2022-463157.5The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.CVE-2022-463169.8A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may affect data integritCVE-2022-463177.5The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availaCVE-2022-463185.3The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in SettCVE-2022-463199.8Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bouCVE-2022-46326.1A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown
CVE-2022-46309: Medium severity, CVSS 6.5 | Vulnix