CVE-2022-1667 — Secheron SEPCOS Control and Protection Relay

CVE-2022-1667

Secheron SEPCOS Control and Protection Relay PUBLISHED

Description (CNA)

Client-side JavaScript controls may be bypassed by directly running a JS function to reboot the PLC (e.g., from the browser console) or by loading the corresponding, browser accessible PHP script

Affected (CNA)

Vendor / product	Versions
Secheron / SEPCOS Control and Protection Relay firmware package	affected All versions before 1.23.21

CWE

CWE-841

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

CISA-ADP

No English description supplied.

No references supplied.