CVE-2022-3010 Predictable SSH credentials in Priva TopControl Suite

The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite...

CVE-2022-3010 Predictable SSH credentials in Priva TopControl Suite

The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite...

CVE-2022-3010

Summary: CVE-2022-3010 affects Priva TopControl Suite versions prior to 8.7.8.0, where an SSH credential deciphering vulnerability exists due to insecure password hashing (CWE-916). This could allow an attacker to calculate and use login credentials to access the affected components remotely. Aff...