CVE-2022-38840

HIGH 7.5CVE-2022-38840 · Published 16/04/2023 · updated 17/06/2026

In short

CVE-2022-38840 is a HIGH (CVSS 7.5) vulnerability affecting man-eam-0003 (guralp).
Chance of exploitation in the next 30 days (EPSS): 9.8%, higher than 95.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
man-eam-0003 guralp	`= 3.2.4`	No fix yet

Description

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosure.

References

packetstormsecurity.com/files/171439/MAN-EAM-0003-3.2.4-XML-Injection.html · Exploit
drive.google.com/drive/folders/1UG5IcL8fFp9MV0vjd78_cx6iXKda5bpM · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free