CVE-2022-30622

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description The system allows unauthorized viewing of usernames and passwords, enabling access to the system. The issue is accessible via the "http://api/sys username passwd.cmd" API endpoint. Additionally, hard-coded credit information and a super-user password are disclosed within the JS code sent to customers in the Login.js file. The disclosed username is chcadmin and the password is chcpassword.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.