CVE-2022-47891 HIGH

CVE-2022-47891: Admin password reset in NetMan 204

Vendor Riello Ups
Product Netman-204
Weakness CWE-798 · Hardcoded credentials
Published October 3, 2023
Last update September 6, 2024
View on NVD All CVEs

CVSS base score

8.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

What the vulnerability does

01Description

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.

Key dates

02Disclosure timeline

October 3, 2023 CVE published
September 6, 2024 Record updated