CVE-2022-4126CWE-1393

Use of Default Password

Critical · published March 27, 2023

CVSS v3.1
9.6
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

🚨 Default credentials still lurking! The ABB RCCMD software is wide open for business with the default username and password combo that many folks forget to change. 🔥 Think of it like leaving the front door of your house wide open with a note saying, 'Please come in!' — inviting unwanted guests without a second thought. 😱 An attacker could waltz right in and take full control of your system, reading sensitive data, modifying configurations, or even shutting down operations entirely. This isn’t just a minor inconvenience; it could lead to absolute chaos!

Put simply

Think of it like leaving the front door of your house wide open with a note saying, 'Please come in!' — inviting unwanted guests without a second thought. 😱 This vulnerability allows anyone to exploit the use of default passwords in ABB RCCMD versions before 4.40 230207, enabling unauthorized access simply by trying common username and password combinations.

What to do

An attacker could waltz right in and take full control of your system, reading sensitive data, modifying configurations, or even shutting down operations entirely. This isn’t just a minor inconvenience; it could lead to absolute chaos! Change the default username and password immediately and ensure that all accounts are secured with strong, unique credentials. Update your ABB RCCMD to version 4.40 230207 or later to fully protect against this vulnerability. You've got this! Secure your systems, and you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-1393 · Use of Default Password
Published
2023-03-27T04:46Z
EPSS history
Timeline
  • 27 MAR 04:46Z
    Use of Default Password
    cvelistv5