VULNERABILITY INTELLIGENCE

CVE-2022-3010

CVSS score7.5 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2024-01-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.

Weakness classification

  • csirt@divd.nl: CWE-1391
  • nvd@nist.gov: CWE-916

Primary references