Lucene search
HistoryDec 13, 2022 - 10:15 p.m.
CVE-2022-41653
daikin svmpc1
daikin svmpc2
login credentials vulnerability
system control
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.1%
Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system.
Affected configurations
Node
daikinlatamsvmpc1Range≤2.1.22
ORdaikinlatamsvmpc2Range≤1.2.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| daikinlatam | svmpc1 | * | cpe:2.3:a:daikinlatam:svmpc1:*:*:*:*:*:*:*:* |
| daikinlatam | svmpc2 | * | cpe:2.3:a:daikinlatam:svmpc2:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-41653
2022-12-13 21:08:36
prion
prion
Design/Logic Flaw
2022-12-13 22:15:00
cve
cve
CVE-2022-41653
2022-12-13 22:15:10
ics
ics
Daikin Holdings Singapore
2022-10-24 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.1%
Related for NVD:CVE-2022-41653