CVE-2022-35582

Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control

published September 13, 2022

CVSS
—
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the documentation. Knowing the credentials, attackers can use this feature to gain uncontrolled access to the device and therefore are considered an undocumented possibility for remote control.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00895 · 59.1th percentile
Published
2022-09-13T22:00Z
EPSS history
Timeline
  • 13 SEP 22:00Z
    Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control
    cvelistv5