VulnerabilityModified
CVE-2022-0183
Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.
MEDIUM 4.6EPSS 0.11%
Does this matter?
Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.
Description
Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.
- CVSS 3.1
- 4.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.11% probability · 1th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-311
- Affected
- kingjim/mirupass pw10 firmware · kingjim/mirupass pw20 firmware
- Source
- vultures@jpcert.or.jp
References
- https://jvn.jp/en/jp/JVN19826500/index.htmlThird Party Advisory
- https://www.kingjim.co.jp/download/security/#mirupassVendor Advisory
- https://jvn.jp/en/jp/JVN19826500/index.htmlThird Party Advisory
- https://www.kingjim.co.jp/download/security/#mirupassVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.