CVE-2022-2103

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-06-24

Last modified

2025-04-16

Weaknesses

CWE-284, CWE-522

Affected products

• Sepcos Control And Protection Relay Firmware (Secheron)
• Sepcos Control And Protection Relay Firmware Package (Secheron)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03