Hardcoded credentials

2023-03-2306:15:00

PRIOn knowledge base

www.prio-n.com

hardcoded credentials

web-ui

varta storage products

vulnerability

unauthorized access

administrative access

network

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.

CPENameOperatorVersion
element_backup_firmwareeq< f21000400
element_s1_firmwareeq< 2e.3.8.0
element_s2_firmwareeq< 2e.3.8.0
element_s3_firmwareeq< 2e.3.8.0
element_s3_firmwareeq>= 2e.4.0.0 AND < 2e.4.4.0
element_s4_firmwareeq< d21010400
one_l_firmwareeq< 2e.3.8.0
one_xl_firmwareeq< 2e.3.8.0
pulse_firmwareeq< c21010800

Name	Operator	Version
element_backup_firmware	eq	< f21000400
element_s1_firmware	eq	< 2e.3.8.0
element_s2_firmware	eq	< 2e.3.8.0
element_s3_firmware	eq	< 2e.3.8.0
element_s3_firmware	eq	>= 2e.4.0.0 AND < 2e.4.4.0
element_s4_firmware	eq	< d21010400
one_l_firmware	eq	< 2e.3.8.0
one_xl_firmware	eq	< 2e.3.8.0
pulse_firmware	eq	< c21010800

References

cert.vde.com/en/advisories/VDE-2022-061/