PT-2022-20217 · Unknown · Update I50 V1.0.55 B20200509+3

Metadata · Published 2022-07-18 · Updated 2022-07-23 · CVE-2022-30627

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Company's products versions update i90 cv2.021 b20210104, update i50 v1.0.55 b20200509, update x6 v2.1.2 b202001127, update b5 v2.0.9 b20200706

Description This issue affects the company's products, making it possible to extract existing user passwords from the firmware on their operating systems.

Recommendations For versions update i90 cv2.021 b20210104, update i50 v1.0.55 b20200509, update x6 v2.1.2 b202001127, update b5 v2.0.9 b20200706, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2022-30627

Affected Products

Update B5 V2.0.9 B20200706

Update I50 V1.0.55 B20200509

Update I90 Cv2.021 B20210104

Update X6 V2.1.2 B202001127

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-30627 · Security Note
• https://osv.dev/vulnerability/CVE-2022-30627 · Vendor Advisory
• https://t.me/cibsecurity/46441 · Telegram Post
• https://gov.il/en/Departments/faq/cve_advisories · Note
• https://t.me/cvenotify/33291 · Telegram Post