← Database

CVE-2022-23771

HIGH CVSS: 8.0 Published: 2022-10-17 Modified: 2026-06-17

Description

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrary user privileges.

Affected Platforms

Iptime Nas1DualIptime Nas1Dual FirmwareIptime Nas4Dual FirmwareIptime Nas4DualIptime Nas2DualIptime Nas2Dual Firmware

Weakness Type

CWE-352, CWE-352

References