Design/Logic Flaw

2022-06-2415:15:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

JSON

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

CPENameOperatorVersion
sepcos_control_and_protection_relay_firmwarege1.23.0
sepcos_control_and_protection_relay_firmwarelt1.23.21
sepcos_control_and_protection_relay_firmwarege1.24.0
sepcos_control_and_protection_relay_firmwarelt1.24.8
sepcos_control_and_protection_relay_firmwarege1.25.0
sepcos_control_and_protection_relay_firmwarelt1.25.3

Name	Operator	Version
sepcos_control_and_protection_relay_firmware	ge	1.23.0
sepcos_control_and_protection_relay_firmware	lt	1.23.21
sepcos_control_and_protection_relay_firmware	ge	1.24.0
sepcos_control_and_protection_relay_firmware	lt	1.24.8
sepcos_control_and_protection_relay_firmware	ge	1.25.0
sepcos_control_and_protection_relay_firmware	lt	1.25.3

References

www.cisa.gov/uscert/ics/advisories/icsa-22-174-03