CVE-2022-26423

—

CVSS 3.1

7.5 high

EPSS

<1%p50

Published

Oct 21, 2022 (Oct 21, 2022)

Modified

Jun 17, 2026

Description

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Vendors: aethon
Products: tug home base server
Weakness: CWE-862, CWE-200, CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

Five zero days affecting Aethon hospital autonomous robots patched

The RecordJan 13, 00:00 UTC · Jan 13, 2023Vulnerability CVE-2022-1066 CVE-2022-26423 CVE-2022-1070+2 CVEs

60

JekyllBot:5 Flaws Let Attackers Take Control of Aethon TUG Hospital Robots

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2022Ransomware CVE-2022-1070 CVE-2022-1066 CVE-2022-26423+2 CVEs

60