CVE-2022-1070 - CVE House
Back to Database
Status published High CVE-2022-1070

CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300

Vulnerability Description

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1070

Credits & Attribution

No credits recorded in the NVD database.

References

More from Aethon

View All →
CVE-2022-27494
CROSS-SITE SCRIPTING CWE-79
High 8.2
CVE-2022-26423
MISSING AUTHORIZATION CWE-862
High 8.2
CVE-2022-1066
MISSING AUTHORIZATION CWE-862
High 8.2
CVE-2022-1059
CROSS-SITE SCRIPTING CWE-79
High 8.2

Affected Vendor

Affected Software

TUG Home Base Server
Vulnerable Versions:
All versions

Timeline

Official Publish: October 21st, 2022
Last Modified: April 17th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.