Lucene search
HistoryAug 17, 2022 - 9:15 p.m.
CVE-2022-35122
access control
ecowitt gw1100
weather stations
sensitive information
wifi passwords
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.005
Percentile
76.1%
An access control issue in Ecowitt GW1100 Series Weather Stations <=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords.
Affected configurations
Node
ecowittgw1100Match-
ecowittgw1100_firmwareRange≤2.1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ecowitt | gw1100 | - | cpe:2.3:h:ecowitt:gw1100:-:*:*:*:*:*:*:* |
| ecowitt | gw1100_firmware | * | cpe:2.3:o:ecowitt:gw1100_firmware:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2022-08-17 21:15:00
cvelist
cvelist
CVE-2022-35122
2022-08-17 20:27:15
cve
cve
CVE-2022-35122
2022-08-17 21:15:09
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
0.005
Percentile
76.1%
Related for NVD:CVE-2022-35122