CVE-2022-31273

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-14 · updated 2026-06-17
Weakness: CWE-307

Description

An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted session_id cookie.

Affected products

17Ido Topidp3000 Topsec Operating System: tos_3.3.005.665b.15_smpidp

References

https://github.com/jhhua/issus/blob/main/1.pdf
https://github.com/jhhua/issus/blob/main/1.pdf

Get alerted when CVE-2022-31273 or the next vulnerability affects your stack