CVE-2022-22908

MEDIUM 5.5CVE-2022-22908 · Published 26/02/2022 · updated 17/06/2026

In short

CVE-2022-22908 is a MEDIUM (CVSS 5.5) vulnerability affecting vdi client (sangfor).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
vdi client sangfor	`= 5.4.2.1006`	No fix yet

Description

SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents of the Username and Password fields.

References

NF-Security-Team/CVEs · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free