CVE-2022-38614

HighCVSS 7.5

Published: 09/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

55th percentile - higher than 55% of all known CVEs

Summary

A vulnerability in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files by modifying the PATH parameter.

Risk Assessment

An attacker can access sensitive system files, configuration files, or customer data, leading to confidentiality and integrity breaches.

Recommendation

Immediately update SmartVista Cardgen to the latest version and restrict access to IGB Files and OutfileService features via proper firewall rules and authentication.

Other vulnerabilities in SmartVista Cardgen

CVE-2022-38613Medium
A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files on the system.

Original NVD description (English source)

An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS