CVE-2022-38614

PoC —

CVSS 3.1

7.5 high

EPSS

1%p62

Published

Sep 9, 2022 (Sep 9, 2022)

Modified

Jul 9, 2026

Description

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.

Vendors: bpcbt
Products: smartvista cardgen
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.