CVE Feed

    Dashboard / CVE / CVE-2022-35120

    CVE-2022-35120

    IXPdata EasyInstall 6.6.14725 contains an access control issue.

    Published:Dec 1, 2022
    Last Modified:Apr 24, 2025
    EPS:Dec 1, 2022
    EPSS Score:0.00018
    CVSS Score:8.8

    Affected Products

    Vendor
    Ixpdata
    Product
    Easyinstall

    Exploits

    https://la.rsbir.ch/CVE-2022-35120.pdfhttps://la.rsbir.ch/CVE-2022-35120.pdf

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-37 Retrieve Embedded Sensitive Data

    Related CVEs

    CVE-2023-27791 (CVSS 8.1) — An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecur…
    CVE-2023-30132 (CVSS 7.8) — An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via stat…
    CVE-2023-30131 (CVSS 9.8) — An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated …
    CVE-2023-27795 (CVSS 7.8) — An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static …
    CVE-2023-27793 (CVSS 7.8) — An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges…
    CVE-2023-27792 (CVSS 7.8) — An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of pe…
    CVE-2019-19893 (CVSS 7.5) — In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unaut…
    CVE-2019-19894 (CVSS 5.5) — In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client…
    CVE-2019-19895 (CVSS 7.8) — In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a cli…
    CVE-2019-19896 (CVSS 9.9) — In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High