Security Advisory

CVE-2022-46307

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-02 00:00:00
Last updated 2025-01-09 14:36:45
Assigner twcert
State PUBLISHED

Description

SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with general privilege can exploit this vulnerability to call privileged APIs to acquire information, manipulate or disrupt the functionality of arbitrary electronic locks.