Security Advisory
CVE-2022-28719
9.8
CRITICAL
Vulnerability Description
Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the managed clients to execute arbitrary code with the administrative privilege.
Published Date
April 28, 2022
Official Source
NIST NVD Advisory