High severity7.5NVD Advisory· Published Sep 9, 2022· Updated Jul 9, 2026

CVE-2022-38614

Description

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bpcbt/Smartvista Cardgen
cpe:2.3:a:bpcbt:smartvista_cardgen:3.28.0:*:*:*:*:*:*:*
Smartvista/Cardgencpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 3.28.0

Patches

Vulnerability mechanics

References

tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/list-all-files-in-arbitrary-folder-in-smartvista-cardgen-version-3.28.0-cve-2022-38614nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000