TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center-Microprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor

Date:2022-03-31

Font-stze:

Microprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor

TVN ID	TVN-202202008
CVE ID	CVE-2022-25594
CVSS	5.3 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products	Microprogram parking lot management system V2.2.9.0518.11
Description	Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information.
Solution	Update version to V3.23.110111817
Public Date	2022-03-31