MEDIUM🇵🇱 Wersja polska

CVE-2022-27179

CVSS 4.6v3.1pub. 2022-04-20upd. 2024-11-21

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

  • Redlion Da50n

    HW
    Redlion
    wszystkie wersje

  • Redlion Da50n Firmware

    OS
    Redlion
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-1039CRITICAL9.6ten sam produkt

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obta...

CVE-2022-26516HIGH8.4ten sam produkt

Authorized users may install a maliciously modified package file when updating the device via the web user int...

CVE-2020-27285CRITICAL9.1ten sam vendor

The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read a...

CVE-2020-16204CRITICAL9.8ten sam vendor

The affected product is vulnerable due to an undocumented interface found on the device, which may allow an at...

CVE-2020-16206CRITICAL9.0ten sam vendor

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely exe...