Critical severity · published Oct 21, 2022
CVE-2022-3203
ORing net IAP-420(+) Hidden Functionality
9.8
CVSS
1%
EPSS
No
On KEV
Description
On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defaults with every reboot.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
IAP-420(+) · ORing
FW 2.0m · source: vendor
IF
Iap-420 Firmware · Oringnet
2.0m · source: NVD
IF
Iap-420+ Firmware · Oringnet
2.0m · source: NVD