by Kastro
Paper/Archive/CVE-2022-2103

CVE-2022-2103

Secheron SEPCOS Control and Protection Relay firmware package — Secheron SEPCOS Control and Protection Relay

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.9.649 × 2013.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

Affected

ProductAffectedFixed inSource
SEPCOS Control and Protection Relay firmware packageAll versions – < 1.23.211.23.21CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/uscert/ics/advisories/icsa-22-174-03