CVE-2022-3091 — RONDS / Equipment Predictive Maintenance Solution

CVE-2022-3091

RONDS / Equipment Predictive Maintenance Solution PUBLISHED

Description (CNA)

RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials. In some circumstances, an attacker can exploit this vulnerability to execute operating system (OS) commands.

Affected (CNA)

Vendor / product	Versions
RONDS / Equipment Predictive Maintenance Solution	affected 1.19.5

CWE

CWE-200

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-02

CISA-ADP

No English description supplied.

No references supplied.