CVE-2022-24689: Dsk Dsknet

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote attacker to access account information pages (including personal data) without being authenticated. The collected information includes the badge numbers that operate as user login names. They have a PIN code. The PIN code is 4 digits and thus can be guessed in 10000 brute force attempts.

Affected products

• Dsk Dsknet: version 2.16.136.0 only; version 2.17.136.5 only

Published 2022-07-18. Last modified 2026-06-17.