CVEvulnerability

CVE-2022-2103

9.1 CRITICAL Published 2022-06-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-284, CWE-522

Description

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

Affected configurations

• secheron sepcos control and protection relay firmware (>= 1.23.0 < 1.23.21) • secheron sepcos control and protection relay firmware (>= 1.24.0 < 1.24.8) • secheron sepcos control and protection relay firmware (>= 1.25.0 < 1.25.3)

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-522 Insufficiently Protected Credentials weakness

References