Lucene search
HistoryOct 03, 2023 - 12:15 p.m.
CVE-2022-47891
cve-2022-47891
netman 204
password reset
security vulnerability
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%
All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
Affected configurations
Node
riello-upsnetman_204Range≤all versions
| CPE | Name | Operator | Version |
|---|---|---|---|
| riello-ups:netman_204_firmware | riello-ups netman 204 firmware | eq | * |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Netman-204",
"vendor": "Riello UPS",
"versions": [
{
"lessThanOrEqual": "all versions",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-47891
2023-10-03 12:15:09
cvelist
cvelist
CVE-2022-47891 Admin password reset in NetMan 204
2023-10-03 11:25:42
prion
prion
Default credentials
2023-10-03 12:15:00
kitploit
kitploit
Thunderstorm - Modular Framework To Exploit UPS Devices
2023-03-06 11:30:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.4%
Related for CVE-2022-47891