CVE-2022-45124
Published: 20 March 2023
Summary
CVE-2022-45124 is a high-severity Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) vulnerability in Wellintech Kinghistorian. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 9.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
An information disclosure vulnerability exists in the user authentication functionality of WellinTech KingHistorian version 35.01.00.05. A specially crafted network packet can trigger the flaw, which is rooted in improper authentication handling and results in exposure of sensitive information over the network. The issue carries a CVSS 3.1 score of 7.5 and is tracked under CWE-200 and CWE-287.
An unauthenticated attacker able to observe network traffic can exploit the vulnerability by capturing and replaying crafted packets, thereby obtaining sensitive data without any user interaction or elevated privileges. Because the attack requires only network adjacency and no authentication, it can be carried out remotely by any party positioned to sniff the affected traffic.
Public references point to detailed analysis from Cisco Talos under TALOS-2022-1683, although the supplied materials do not describe vendor patches or explicit mitigation steps.
The associated EPSS score reached a peak of 0.0908 after starting from a lower value, indicating that exploitation interest increased following disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-48041
Vulnerability details
An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Literacy training teaches users to recognize and avoid actions that result in unauthorized exposure of sensitive information.
Session auditing enables detection of unauthorized exposure or access to sensitive information during user activities.
Audit record review and analysis can detect unauthorized exposure or access to sensitive information.
Penetration testing probes authentication mechanisms for bypasses, allowing identification and fixing of improper authentication issues.
The integrated analysis team enables faster detection and containment of incidents involving unauthorized exposure of sensitive information, limiting attacker success in exploiting such weaknesses.
Security architectures must specify authentication requirements and approaches, making systemic authentication weaknesses harder to introduce.
Trained staff understand data-handling requirements and are less likely to expose sensitive information through misconfiguration or poor design.
Hunting detects anomalous authentication patterns or successful bypasses that allow persistent unauthorized entry.