CVE-2022-31211

An issue was discovered in Infiray IRAY-A8Z3 1.0.957

published July 17, 2022

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

🚨 A blank root password for TELNET is the default setting in the Infiray IRAY-A8Z3 1.0.957! Imagine leaving your front door wide open, and you’ll get the idea. 🔥 It's like having a shop with the 'Open' sign on but no security measures in place. Anyone passing by can just walk in and take whatever they want, no questions asked! With this vulnerability, anyone who discovers the default TELNET access can waltz right into your system and gain full control. They could potentially access sensitive data or even change configurations, which could lead to widespread chaos in your setup. It's a surprisingly simple oversight that could have devastating consequences!

Put simply

It's like having a shop with the 'Open' sign on but no security measures in place. Anyone passing by can just walk in and take whatever they want, no questions asked! This vulnerability arises because the Infiray IRAY-A8Z3 device ships with a default TELNET root password that is blank, meaning unauthorized users can access the device without any credentials.

What to do

With this vulnerability, anyone who discovers the default TELNET access can waltz right into your system and gain full control. They could potentially access sensitive data or even change configurations, which could lead to widespread chaos in your setup. It's a surprisingly simple oversight that could have devastating consequences! To secure your device, the first step is to set a strong root password for TELNET immediately. Next, consider disabling TELNET access altogether and using more secure protocols. Stay vigilant by regularly updating your devices to the latest firmware to patch any further vulnerabilities. You've got this! With a few simple steps, you can lock down your system and keep those pesky intruders out! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01705 · 77.1th percentile
Published
2022-07-17T22:43Z
EPSS history
Timeline
  • 17 JUL 22:43Z
    An issue was discovered in Infiray IRAY-A8Z3 1.0.957
    cvelistv5