CVE-2022-28719 - CVE House
Back to Database
Status published Critical CVE-2022-28719

Missing authentication for critical function in AssetView prior to Ver.13.2.0...

Vulnerability Description

Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the managed clients to execute arbitrary code with the administrative privilege.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-28719

Credits & Attribution

No credits recorded in the NVD database.

References

More from Hammock Corporation

View All →
CVE-2025-27244
AssetView and AssetView CLOUD contain an issue with acquiring sensitive...
Medium 5.9
CVE-2025-25060
Missing authentication for critical function vulnerability exists in AssetView and...
High 8.2
CVE-2017-2241
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and...
Medium 6.3
CVE-2017-2240
Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier...
Medium 6.5

Affected Vendor

Hammock Corporation

View all reports →

Affected Software

AssetView
Vulnerable Versions:
prior to Ver.13.2.0

Timeline

Official Publish: April 28th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.