{"vulnerability": "CVE-2022-24042", "sightings": [{"uuid": "35b4d87b-fbb2-49f5-9f21-158c506880ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2022-24042", "type": "seen", "source": "https://t.me/EchelonEyes/276", "content": "", "creation_timestamp": "2026-07-17T05:00:04.885714Z"}, {"uuid": "799d9187-7298-47f4-a09d-0003cebfb8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24042", "type": "seen", "source": "https://t.me/cibsecurity/42224", "content": "\u203c CVE-2022-24042 \u203c\n\nA vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application returns an AuthToken that does not expire at the defined auto logoff delay timeout. An attacker could be able to capture this token and re-use old session credentials or session IDs for authorization.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-10T14:32:51.000000Z"}, {"uuid": "e7c3e593-5771-4dff-9168-5b944c31b681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2022-24042", "type": "seen", "source": "https://t.me/EchelonEyes/276", "content": "", "creation_timestamp": "2026-07-18T00:00:39.120349Z"}]}