VULNERABILITY INTELLIGENCE

CVE-2022-3485

CVSS score9.8 CRITICAL
EPSS probability0.99%
CISA KEVNot currently listed
Published2022-12-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

Weakness classification

  • CWE-640: Weak Password Recovery Mechanism for Forgotten Password

Primary references