What’s Vulnerable › Vulnerabilities
CVE-2022-25342
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-04-20 · updated 2026-06-17
- Weakness: CWE-862
Description
An issue was discovered on Olivetti d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application is affected by Broken Access Control. It does not properly validate requests for access to data and functionality under the /mngset/authset path. By not verifying permissions for access to resources, it allows a potential attacker to view pages that are not allowed.
Affected products
- Olivetti D-Color Mf3555 Firmware: 2xd_s000.002.271
References
Get alerted when CVE-2022-25342 or the next vulnerability affects your stack