High severity8.0NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026
CVE-2022-23771
CVE-2022-23771
Description
This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrary user privileges.
Affected products
2- Range: unspecified
Patches
Vulnerability mechanics
References
1- www.krcert.or.kr/krcert/secNoticeView.donvdThird Party Advisory
News mentions
0No linked articles in our index yet.