PT-2022-6535 · Ritto · Ritto Wiser Door

Published 2022-03-08 · Updated 2022-03-12 · CVE-2021-22783

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ritto Wiser Door (All versions)

Description The issue is related to information exposure during data exchange, potentially allowing a session hijack when the door panel communicates with the door.

Recommendations For all versions, update the firmware to prevent information exposure and potential session hijack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2023-02127

CVE-2021-22783

Affected Products

Ritto Wiser Door

References · 5

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-03 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02127 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-22783 · Security Note
• https://vuldb.com/ru/?id.194482 · Note
• https://t.me/cvenotify/28002 · Telegram Post