CVE-2022-3010 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Assigner	DIVD
Reserved	2022-08-26
Published	2024-01-02
Updated	2024-08-06

Description

The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.

HIGH: 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Product status

Default status

unaffected

All versions prior to 8.7.8.0 before 8.7.8.0

affected

Default status

unaffected

All versions prior to 8.7.8.0 before 8.7.8.0

affected

Default status

unaffected

All versions prior to 8.7.8.0 before 8.7.8.0

affected

Default status

unaffected

All versions prior to 8.7.8.0 before 8.7.8.0

affected

Default status

unaffected

All versions prior to 8.7.8.0 before 8.7.8.0

affected

Credits

A researcher at NorthWave reported this vulnerability to DIVD. finder

Victor Pasman analyst

References

https://csirt.divd.nl/CVE-2022-3010 third-party-advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-22-356-01 third-party-advisory

https://csirt.divd.nl/DIVD-2022-00035 related

cve.org CVE-2022-3010

nvd.nist.gov CVE-2022-3010

Download JSON

https://cve.threatint.com/CVE/CVE-2022-3010

Subscribe to our newsletter to learn more about our work.