CVE-2022-43438: Easy Test Project Easy Test

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service.

Affected products

• Easy Test Project Easy Test: from 17l18s, before 22i26 (fixed in 22i26)

Published 2023-01-03. Last modified 2026-06-17.