CVE-2022-3485
Critical
Description
In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.
SeverityCritical
CVSS9.8
Exploit probability—
ProductIfm Moneo Qha210 Firmware
PublishedDec 12, 2022
First seenDec 12, 2022
Weakness typeCWE-640CWE-640
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ifm moneo_qha210_firmware | v ≤ 1.9.3 | — |
| ifm moneo_qha200_firmware | v ≤ 1.9.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.