CVE-2022-38614

HIGH 7.5CVE-2022-38614 · Published 09/09/2022 · updated 09/07/2026

In short

CVE-2022-38614 is a HIGH (CVSS 7.5) vulnerability affecting smartvista cardgen (bpcbt).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
smartvista cardgen bpcbt	`= 3.28.0`	No fix yet

Description

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.

References

tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/list-all-files-in-arbitrary-folder-in-smartvista-cardgen-version-3.28.0-cve-2022-38614 · Exploit

More vulnerabilities in smartvista cardgen

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free