cvedb.io
CVE-2022-32965
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2022-08-04T10:15:08.250 · Last modified 2026-06-17T04:48:18.693

Summary

OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service.

Affected products

omicard_edm_project — omicard_edm

Does this affect you?

Add your gear to cvedb and we'll alert you only when omicard_edm_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.