MEDIUM🇵🇱 Wersja polska

CVE-2022-27179

CVSS 4.6v3.1pub. 2022-04-20upd. 2024-11-21

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

  • Redlion Da50n

    HW
    Redlion
    all versions

  • Redlion Da50n Firmware

    OS
    Redlion
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-1039CRITICAL9.6PL ✓same product

Słabe hasła w Red Lion DA50N umożliwiają przejęcie urządzenia

CVE-2022-26516HIGH8.4same product

Authorized users may install a maliciously modified package file when updating the device via the web user int...

CVE-2020-27285CRITICAL9.1PL ✓same vendor

Red Lion Crimson 3.1 — dostęp do bazy danych bez uwierzytelnienia

CVE-2020-16204CRITICAL9.8PL ✓same vendor

Ukryty interfejs w Red Lion N-Tron 702-W umożliwia wykonanie komend jako root

CVE-2020-16206CRITICAL9.0PL ✓same vendor

Stored XSS umożliwiający RCE w Red Lion N-Tron 702-W / 702M12-W