Improper Write Access Control in Siemens Healthineers syngo Dynamics Application

CVE-2022-42893

What is CVE-2022-42893?

A vulnerability has been discovered in the syngo Dynamics application, which is susceptible to improper write access control. This flaw allows potential attackers to write data to any directory accessible to the account linked with the web application's application pool, creating significant security risks for data integrity and confidentiality.

References