Vulnerability Description
A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redlion | Da50N Firmware | - |
| Redlion | Da50N | - |
Related Weaknesses (CWE)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03MitigationThird Party AdvisoryUS Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2022-27179?
CVE-2022-27179 is a vulnerability with a CVSS score of 4.6 (MEDIUM). A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resour...
How severe is CVE-2022-27179?
CVE-2022-27179 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-27179?
Check the references section above for vendor advisories and patch information. Affected products include: Redlion Da50N Firmware, Redlion Da50N.