CVE-2022-45938
CVSS 3.1 Score 9 of 10 (high)
Details
Published Jun 2, 2023
Updated: Jan 10, 2025
CWE ID 79
Summary
CVE-2022-45938 is a critical vulnerability affecting Comcast Defined Technologies' microeisbss software through 2021. An attacker can exploit this issue by injecting a stored Cross-Site Scripting (XSS) payload in the Device ID field within the Inventory Management section. This allows the attacker to execute remote code and escalate privileges. Successful exploitation could lead to unauthorized access, data theft, or system takeover. Users are urged to upgrade to the latest version of microeisbss to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Comcast Cable Communications, LLC