VulnerabilityModified
CVE-2022-3203
You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell.
CRITICAL 9.8EPSS 0.89%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.89%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
On ORing net IAP-420(+) with FW version 2.0m a telnet server is enabled by default and cannot permanently be disabled. You can connect to the device via LAN or WiFi with hardcoded credentials and get an administrative shell. These credentials are reset to defaults with every reboot.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.89% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-912
- Affected
- oringnet/iap-420\+ firmware · oringnet/iap-420 firmware
- Source
- info@cert.vde.com
References
- https://mads.uniud.it/2022/09/lord-of-the-orings/Exploit, Mitigation, Third Party Advisory
- https://mads.uniud.it/2022/09/lord-of-the-orings/Exploit, Mitigation, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.