CVE-2022-2103
24.06.2022, 15:15
An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.Enginsight
| Vendor | Product | Version |
|---|---|---|
| secheron | sepcos_control_and_protection_relay_firmware | 1.23.0 ≤ 𝑥 < 1.23.21 |
| secheron | sepcos_control_and_protection_relay_firmware | 1.24.0 ≤ 𝑥 < 1.24.8 |
| secheron | sepcos_control_and_protection_relay_firmware | 1.25.0 ≤ 𝑥 < 1.25.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- CWE-522 - Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.