Skip to content
OpenAdvisories
High · 8.8 CVE-2022-43438 EUVD-2022-46441GHSA-j22m-fwc5-8qpp

HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest - Incorrect Authorization

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by twcert

Description

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service.

Affected products

VendorProductAffectedFixed
HWA JIUH DIGITAL TECHNOLOGY EasyTest 17L18S – ≤ 22H29 —

References