Critical severity9.8NVD Advisory· Published Dec 13, 2022· Updated Jun 17, 2026
CVE-2022-2757
CVE-2022-2757
Description
Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an attacker viewing and modifying the application settings without authenticating by accessing a specific uniform resource locator (URL) on the webserver.
Affected products
3- cpe:2.3:o:kingspan:tms300_cs_firmware:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsa-22-256-04nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.