CVE-2022-45139

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description A CORS misconfiguration in the web-based management allows a malicious third-party web server to misuse basic information pages, potentially leading to the disclosure of device information such as CPU diagnostics. The impact is limited to a small subset of confidentiality due to the restricted amount of readable information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.