High · 8.2 CVE-2022-27494 EUVD-2022-31995GHSA-p4x7-px78-gghm

CROSS-SITE SCRIPTING CWE-79

Published Oct 21, 2022 · Updated Apr 17, 2025 · Assigned by icscert

Description

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Vendor	Product	Affected	Fixed
Aethon	TUG Home Base Server	All versions – < 24	24

ICSA-22-102-05 Aethon TUG Home Base Server CISA ICS & IT advisories · Apr 12, 2022