CVE-2022-30018

ALTO 8.8CVE-2022-30018 · Published 19/05/2022 · updated 17/06/2026

In breve

CVE-2022-30018 è una vulnerabilità ALTO (CVSS 8.8) che riguarda mxcontrolcenter (mobotix).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 65.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mxcontrolcenter mobotix	`≤ 2.5.4.5`	No fix yet

Description

Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access to recordings/recording locations.

References

PurplePetrus/MxCC_Credential-Storage_issue · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free