Description (CNA)
The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Priva / TopControl Suite - Bacnet | affected All versions prior to 8.7.8.0 before 8.7.8.0 |
| Priva / TopControl Suite - Blue ID | affected All versions prior to 8.7.8.0 before 8.7.8.0 |
| Priva / TopControl Suite - Compass | affected All versions prior to 8.7.8.0 before 8.7.8.0 |
| Priva / TopControl Suite - Connect | affected All versions prior to 8.7.8.0 before 8.7.8.0 |
| Priva / TopControl Suite - TPC | affected All versions prior to 8.7.8.0 before 8.7.8.0 |
CWE
CWE-1391
References
- https://csirt.divd.nl/CVE-2022-3010
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-356-01
- https://csirt.divd.nl/DIVD-2022-00035
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.