How severe is CVE-2022-30620?

CVE-2022-30620 has a CVSS v3 score of 8.2 (HIGH).

CVE-2022-30620

Name: cellinx_nvt_-_ip_ptz_camera
Author: cellinx

8.2HIGH

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Ad

Publicado: 7/18/2022Actualizado: 11/21/2024

Descripción

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.

Análisis IAImpulsado por IA

Productos Afectados

cellinxcellinx_nvt_-_ip_ptz_camera_firmware

3.2.0

cellinxcellinx_nvt_-_ip_ptz_camera_firmware

3.2.1

cellinxcellinx_nvt_-_ip_ptz_camera

Referencias

https://www.gov.il/en/departments/faq/cve_advisories
Third Party Advisory
https://www.gov.il/en/departments/faq/cve_advisories
Third Party Advisory