CVE-2022-2105
24.06.2022, 15:15
Client-side JavaScript controls may be bypassed to change user credentials and permissions without authentication, including a “root” user level meant only for the vendor. Web server root level access allows for changing of safety critical parameters.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| secheron | sepcos_control_and_protection_relay_firmware | 1.23.0 ≤ 𝑥 < 1.23.21 |
| secheron | sepcos_control_and_protection_relay_firmware | 1.24.0 ≤ 𝑥 < 1.24.8 |
| secheron | sepcos_control_and_protection_relay_firmware | 1.25.0 ≤ 𝑥 < 1.25.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration