VULNERABILITY INTELLIGENCE

CVE-2022-2103

CVSS score9.8 CRITICAL

EPSS probability1.07%

CISA KEVNot currently listed

Published2022-06-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

Weakness classification

CWE-284: Improper Access Control
CWE-522: Insufficiently Protected Credentials

Primary references

ics-cert@hq.dhs.gov — Mitigation, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory, US Government Resource