CVE-2022-3485

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

Score

CVSS 3.1 9.8 Critical

Status

Modified - info@cert.vde.com

Published

2022-12-12

Last modified

2025-04-22

Weaknesses

CWE-640

Affected products

• Moneo Appliance (Ifm)
• Moneo Qha200 Firmware (Ifm)
• Moneo Qha210 Firmware (Ifm)

References

• https://cert.vde.com/en/advisories/VDE-2022-050/