CVE-2022-22512

🗓️ 23 Mar 2023 05:32:16Reported by CERTVDEType

Hard-coded credentials in VARTA Storage Web-U

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-22512	23 Mar 202311:36	–	circl
CNNVD	VARTA Storage 信任管理问题漏洞	23 Mar 202300:00	–	cnnvd
Cvelist	CVE-2022-22512 VARTA: Multiple devices prone to hard-coded credentials	23 Mar 202305:32	–	cvelist
EUVD	EUVD-2022-27658	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22512	23 Mar 202306:15	–	nvd
OSV	CVE-2022-22512	23 Mar 202306:15	–	osv
Prion	Hardcoded credentials	23 Mar 202306:15	–	prion
Positive Technologies	PT-2023-12705 · Varta · Varta Storage	23 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-22512	5 Feb 202519:59	–	redhatcve
Vulnrichment	CVE-2022-22512 VARTA: Multiple devices prone to hard-coded credentials	23 Mar 202305:32	–	vulnrichment

NVD

Vulners

Node

varta element_backup_firmwareRange<f21000400

AND

varta element_backupMatch-

Node

varta element_s1_firmwareRange<2e.3.8.0

AND

varta element_s1Match-

Node

varta element_s2_firmwareRange<2e.3.8.0

AND

varta element_s2Match-

Node

varta element_s3_firmwareRange<2e.3.8.0

varta element_s3_firmwareRange2e.4.0.0–2e.4.4.0

AND

varta element_s3Match-

Node

varta element_s4_firmwareRange<d21010400

AND

varta element_s4Match-

Node

varta one_l_firmwareRange<2e.3.8.0

AND

varta one_lMatch-

Node

varta one_xl_firmwareRange<2e.3.8.0

AND

varta one_xlMatch-

Node

varta pulse_firmwareRange<c21010800

AND

varta pulseMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Element backup",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "F21000400",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S1",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S2",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S2",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S3",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S3",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.4.4.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S4",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "D21010400",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "One L/XL",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Pulse (not pulse neo)",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "C21010800",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2022-061/

21 Nov 2024 06:46Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.00344

SSVC

CWE-798