Detections
Analytics
CVE-2022-23771
high
Description
This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrary user privileges.
References
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66964