CVE-2022-41653

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user login credentials and control the system.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-12-13

Last modified

2025-04-16

Weaknesses

CWE-259, CWE-798

Affected products

• Svmpc1 (Daikin)
• Svmpc2 (Daikin)
• Svmpc1 (Daikinlatam)
• Svmpc2 (Daikinlatam)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-02