VULNERABILITY INTELLIGENCE

CVE-2022-23858

CVSS score8.8 HIGH
EPSS probability1.12%
CISA KEVNot currently listed
Published2022-01-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references