CVE Catalog

CVE-2022-26643

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.89%

55th percentile - higher than 55% of all known CVEs

Summary

An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application. This vulnerability enables unauthorized user enumeration.

Risk Assessment

The risk involves potential social engineering or brute-force attacks against known user accounts, which could lead to unauthorized system access.

Recommendation

Immediately update EasyIO CPT Graphics to the latest available version that fixes this vulnerability. If an update is not possible, restrict access to the application to trusted networks only.

Original NVD description (English source)

An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS