ZeroHour

CVE-2022-22512

CVSS 3.1
9.8 critical
EPSS
<1%p50
Published
()
Modified
Description

Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.

Vendors
varta
Products
element backup firmware, element s1 firmware, element s2 firmware, element s3 firmware, element s4 firmware, one l firmware, one xl firmware, pulse firmware
Weakness
CWE-798
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.