PT-2022-19525 · Unknown · Solarview Compact

Published 2022-05-12 · Updated 2022-10-19 · CVE-2022-29298

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SolarView Compact version 6.00

Description The issue allows attackers to access sensitive files via directory traversal.

Recommendations For SolarView Compact version 6.00, consider restricting access to sensitive files as a temporary workaround until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-29298

Affected Products

Solarview Compact

References · 6

• 🔥 https://drive.google.com/file/d/1-RHw9ekVidP8zc0xpbzBXnse2gSY1xbH/view?usp=sharing · Exploit
• 🔥 http://packetstormsecurity.com/files/167383/SolarView-Compact-6.00-Directory-Traversal.html · Exploit
• 🔥 https://exploit-db.com/exploits/50950 · Exploit
• https://osv.dev/vulnerability/CVE-2022-29298 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29298 · Security Note
• https://t.me/cibsecurity/42516 · Telegram Post