PT-2022-3519 · Unknown · Sepcos Single Package

Anthony Candarini + 3 · Published 2022-06-16 · Updated 2022-07-05 · CVE-2022-2103

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SEPCOS Single Package versions (affected versions not specified)

Description The issue is related to inadequate access control, allowing an attacker with weak credentials to access sensitive files and write to remotely executable directories via an open FTP port. This could enable a remote attacker to read confidential files and write to directories that can be executed remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Insufficiently Protected Credentials

Weakness Enumeration

CWE-284

CWE-522

Related Identifiers

BDU:2022-04300

CVE-2022-2103

Affected Products

Sepcos Single Package

References · 7

• https://bdu.fstec.ru/vul/2022-04300 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2103 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2103 · Security Note
• https://cybersecurity-help.cz/vdb/SB2022062712 · Note
• https://t.me/cvenotify/32614 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-174-03 · Note
• https://vuldb.com/?id.202725 · Note