PT-2022-13020 · Tepra · Tepra Pro Sr-R7900P+1

Taizoh Tsukamoto · Published 2022-01-17 · Updated 2022-01-28 · CVE-2022-0184

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TEPRA PRO SR5900P versions 1.080 and earlier TEPRA PRO SR-R7900P versions 1.030 and earlier

Description The issue allows an attacker on the adjacent network to obtain credentials for connecting to the Wi-Fi access point with the infrastructure mode due to insufficiently protected credentials.

Recommendations For TEPRA PRO SR5900P versions 1.080 and earlier, update to a version later than 1.080 to resolve the issue. For TEPRA PRO SR-R7900P versions 1.030 and earlier, update to a version later than 1.030 to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2022-0184

Affected Products

Tepra Pro Sr-R7900P

Tepra Pro Sr5900P

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-0184 · Security Note
• https://kingjim.co.jp/download/security/#sr01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0184 · Vendor Advisory
• https://jvn.jp/en/jp/JVN81479705/index.html · Note