Medium severity · published Apr 20, 2022
CVE-2022-27179
A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Da50n Firmware · Redlion
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-27179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-27179
Mitigation
https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03
More from Da50n Firmware
9.8
CVE-2022-1039
The weak password on the web user interface can be exploited via HTTP or HTTPS
7.8
CVE-2022-26516
Authorized users may install a maliciously modified package file when updating the device via the web user interface