CVE-2022-40939

In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B20171107A, V2.3.4.1301-M20-TSA-B20150617A, V2.5.5.3116-S50-RXA-B20180502A, V2.5.5.3116-S50-SMA-B20190723A, V2.5.5.3116-S50-SMB-B20161012A, V2.3.4.2103-S50-NTD-B20170508B, V2.5.5.3116-S50-SMB-B20160601A, V2.5.5.2601-S50-TSA-B20151229A, and V2.5.5.3116-S50-SMA-B20170217.

Score

CVSS 3.1 4.9 Medium

Status

Modified - cve@mitre.org

Published

2022-12-08

Last modified

2025-04-22

Weaknesses

CWE-319

Affected products

• Secustation Firmware (Secu)

References

• https://cdsbz.gitbook.io/untitled/secustion-camera-vulnerability-recurrence