CVE-2022-22056 Le-yan Co., Ltd. dental management system - Hard-coded Credentials
An unauthenticated remote attacker can use hard-coded credentials to gain administrator privileges and control the dental management system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-22056?
CVE-2022-22056 is a critical vulnerability in Le-yan Co., Ltd. Dental Management System, published on 14 Jan 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service.
Weakness: CWE-798
Which versions are affected by CVE-2022-22056?
It affects 1 product.
Products include Le-Yan Dental Management System Project Le-Yan Dental Management System.
How do I fix CVE-2022-22056?
No fix has been published for CVE-2022-22056 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-22056 being exploited?
There is no known exploitation of CVE-2022-22056 in the wild and no public exploit code.
Other vulnerabilities in Le-yan Co., Ltd. Dental Management System
Sources
Also known as GHSA-5jh3-w6q5-9mr3.