CVE-2022-30620

High

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing…

INCD·CWE-565·Published 2022-07-18

CVSS

8.8

EPSS

0.00

KEV

Exploits

cve.orgen

282 chars

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.

NVDen

282 chars

NVDes

288 chars

En la cámara Cellinx con el invitado habilitado, el atacante con acceso a la web puede elevar privilegios a administrativos: "1" a "0" cambiando los siguientes valores de cookie "is_admin", "showConfig". Privilegios administrativos que permiten cambiar varias configuraciones en la cámara

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	8.2	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H