CVEvulnerability
CVE-2022-38355
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-12-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-284
Description
Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to
attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.
Affected configurations
• daikinlatam svmpc1 (<= 2.1.22)
• daikinlatam svmpc2 (<= 1.2.3)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-02 Third Party Advisory, US Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-02 Third Party Advisory, US Government Resource