CVE-2022-4780

ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators are not forced to change.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NCSC.chCNA
4.5 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
elvexysisos_firmware
1.81 ≤
𝑥
≤ 2.00
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
elvexysisos
1.81 ≤
𝑥
≤ 2.0
CNA
Common Weakness Enumeration
References
https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/isos-release-notes/
https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/isos-release-notes/