CVE-2022-45124 Information disclosure in KingHistorian
An attacker can sniff network traffic to disclose sensitive information from WellinTech KingHistorian authentication functionality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-45124?
CVE-2022-45124 is a high-severity vulnerability in WellinTech KingHistorian, published on 20 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability.
Which versions are affected by CVE-2022-45124?
It affects 1 product.
Products include Wellintech Kinghistorian.
How do I fix CVE-2022-45124?
No fix has been published for CVE-2022-45124 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-45124 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-45124 exists.
Other vulnerabilities in WellinTech KingHistorian
Sources
Also known as GHSA-xm38-cjvm-pwwc.