CVE-2022-2105 — Secheron SEPCOS Control and Protection Relay

CVE-2022-2105

Secheron SEPCOS Control and Protection Relay PUBLISHED

Description (CNA)

Client-side JavaScript controls may be bypassed to change user credentials and permissions without authentication, including a “root” user level meant only for the vendor. Web server root level access allows for changing of safety critical parameters.

Affected (CNA)

Vendor / product	Versions
Secheron / SEPCOS Control and Protection Relay firmware package	affected All versions before 1.23.21

CWE

CWE-841

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

CISA-ADP

No English description supplied.

No references supplied.