CVE-2022-1666CWE-522

Secheron SEPCOS Control and Protection Relay

Medium · published June 24, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

The default password for the web application’s root user (the vendor’s private account) was weak and the MD5 hash was used to crack the password using a widely available open-source tool.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00788 · 55.7th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-06-24T15:00Z
EPSS history
Timeline
  • 24 JUN 15:00Z
    Secheron SEPCOS Control and Protection Relay
    cvelistv5