CVE-2022-28719: Hammock Assetview

Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days.

Missing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote unauthenticated attacker with some knowledge on the system configuration to upload a crafted configuration file to the managing server, which may result in the managed clients to execute arbitrary code with the administrative privilege.

Affected products

• Hammock Assetview: before 13.2.0 (fixed in 13.2.0)

Published 2022-04-28. Last modified 2026-06-17.