{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-05T14:26:10.579","vulnerabilities":[{"cve":{"id":"CVE-2022-38130","sourceIdentifier":"vulnreport@tenable.com","published":"2022-08-10T20:16:06.777","lastModified":"2026-06-17T04:56:09.533","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\\\<attacker-host>\\sms\\<attacker-db.zip>), effectively controlling the content of the database to be restored."},{"lang":"es","value":"El método com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() es usado para restaurar la base de datos HSQLDB usada en SMS. Toma la ruta del archivo de base de datos comprimido como único parámetro. Un atacante remoto no autenticado puede especificar una ruta UNC para el archivo de la base de datos (por ejemplo, \\\\(attacker-host)\\sms\\(attacker-db.zip)), controlando efectivamente el contenido de la base de datos a restaurar"}],"affected":[{"source":"vulnreport@tenable.com","affectedData":[{"vendor":"n/a","product":"Keysight Technologies Sensor Management Server","versions":[{"version":"Keysight Technologies Sensor Management Server v2.4.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:keysight:sensor_management_server:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"6C06DC29-B180-42E4-B4CA-97BB3005445A"}]}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2022-28","source":"vulnreport@tenable.com","tags":["Third Party Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2022-28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}