High · 8.2 CVE-2022-1070 EUVD-2022-24414GHSA-583f-56ww-9ppj

CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300

Published Oct 21, 2022 · Updated Apr 17, 2025 · Assigned by icscert

Description

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Vendor	Product	Affected	Fixed
Aethon	TUG Home Base Server	All versions – < 24	24

ICSA-22-102-05 Aethon TUG Home Base Server CISA ICS & IT advisories · Apr 12, 2022