CVE-2022-45088

Critical

Published: 12/02/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and exposure of sensitive data. Organizations should be aware of the risks associated with local file inclusion.

Recommendation

It is recommended to update Smartpower Web to version 23.01.01 or later to mitigate this vulnerability. Additionally, implementing further input validation mechanisms is advisable.

Original NVD description (English source)

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01.