Vulnerability · Published Jul 20, 2022 · Assigned by twcert
CVE-2022-32958TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling
High 7.7
In plain English
A high-severity resource allocation without limits in Teamplus Pro (Private cloud) from TEAMPLUS TECHNOLOGY INC.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)7.7High
Exploit odds (30 days)1.0%top 37.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate other recipients’ Teamplus Pro chat process.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TEAMPLUS TECHNOLOGY INC. | Teamplus Pro (Private cloud) | unspecified – through 3.011.6.0.1 |
| TEAMPLUS TECHNOLOGY INC. | Teamplus Pro (Private cloud) | unspecified – through 3.011.6.0.1 |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
References
- https://www.twcert.org.tw/tw/cp-132-6289-a5524-1.html x_refsource_MISC