CVE-2022-35122

An access control issue in Ecowitt GW1100 Series Weather Stations <=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including…

published August 17, 2022

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

⚠️ An access control slip-up means your Ecowitt GW1100 Weather Station might be spilling secrets! Unauthenticated attackers can grab sensitive info without breaking a sweat. 🌧️ Think of this as a community bulletin board where anyone can read your private notes because the lock's broken—no one should have access, but here we are! 📋 This vulnerability could allow a crafty attacker to access your device and local WiFi passwords, putting your network at risk and exposing your data to unwanted eyes. If they get in, they could control your smart home devices or eavesdrop on your personal activities—yikes!

Put simply

Think of this as a community bulletin board where anyone can read your private notes because the lock's broken—no one should have access, but here we are! 📋 The access control issue in the Ecowitt GW1100 Series Weather Stations allows attackers without any authentication to access sensitive information, including device and WiFi credentials, potentially leading to further breaches.

What to do

This vulnerability could allow a crafty attacker to access your device and local WiFi passwords, putting your network at risk and exposing your data to unwanted eyes. If they get in, they could control your smart home devices or eavesdrop on your personal activities—yikes! Upgrade your Ecowitt GW1100 to version GW1100B_v2.1.6 or later to patch this issue. Additionally, consider changing your WiFi password and monitoring any unusual activity on your network. 🛡️ You've got this! Follow these steps, and you'll keep those sneaky secrets safe and sound. 🔒

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01127 · 66.1th percentile
Published
2022-08-17T20:27Z
EPSS history
Timeline
  • 17 AUG 20:27Z
    An access control issue in Ecowitt GW1100 Series Weather Stations <=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive information including…
    cvelistv5