VULNERABILITY INTELLIGENCE

CVE-2022-38355

CVSS score7.5 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2022-12-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-284
  • nvd@nist.gov: NVD-CWE-Other

Primary references