Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistCERTVDECVELIST:CVE-2022-22512
HistoryMar 23, 2023 - 5:32 a.m.

CVE-2022-22512 VARTA: Multiple devices prone to hard-coded credentials

2023-03-2305:32:16
CWE-798
CERTVDE
www.cve.org
1
cve-2022-22512; hard-coded credentials; web-ui; varta storage; unauthorized access; administrative access; network vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Element backup",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "F21000400",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S1",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S2",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S2",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S3",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S3",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.4.4.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Element S4",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "D21010400",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "One L/XL",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "2e.3.8.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Pulse (not pulse neo)",
    "vendor": "VARTA Storage",
    "versions": [
      {
        "lessThan": "C21010800",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Related

cve 1
prion 1
nvd 1
cve
cve
CVE-2022-22512
2023-03-23 06:15:12
prion
prion
Hardcoded credentials
2023-03-23 06:15:00
nvd
nvd
CVE-2022-22512
2023-03-23 06:15:12

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON
Related for CVELIST:CVE-2022-22512
cve1prion1nvd1