CVE-2022-1666 — Secheron SEPCOS Control and Protection Relay

CVE-2022-1666

Secheron SEPCOS Control and Protection Relay PUBLISHED

Description (CNA)

The default password for the web application’s root user (the vendor’s private account) was weak and the MD5 hash was used to crack the password using a widely available open-source tool.

Affected (CNA)

Vendor / product	Versions
Secheron / SEPCOS Control and Protection Relay firmware package	affected All versions before 1.23.21

CWE

CWE-522

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

CISA-ADP

No English description supplied.

No references supplied.