Local File Inclusion in Smartpower Web
CVE-2022-45088

9.8CRITICAL

Key Information:

Vendor: Group Arge Energy And Control Systems
Status: Smartpower Web
Vendor: CVE Published:; 12 February 2023

🔔 Create Group Arge Energy And Control Systems Vulnerability Alert

What is CVE-2022-45088?

An improper input validation vulnerability exists in Group Arge Energy and Control Systems Smartpower Web, leading to potential PHP Local File Inclusion. This issue could allow an attacker to manipulate file paths, gaining unauthorized access to sensitive information on the server. Affected users should update to version 23.01.01 or later to mitigate associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Smartpower Web 0 < 23.01.01

References

https://www.usom.gov.tr/bildirim/tr-23-0066

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 12, 2023
Vulnerability Reserved
Nov 9, 2022

JSON

Group Arge Energy And Control Systems

What is CVE-2022-45088?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.