high7.5
CVE-2022-1667
Client-side JavaScript controls may be bypassed by directly running a JS function to reboot the PLC (e.g., from the browser console) or by loading the correspo…
Impact
Client-side JavaScript controls may be bypassed by directly running a JS function to reboot the PLC (e.g., from the browser console) or by loading the corresponding, browser accessible PHP script
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secheron | Sepcos Control And Protection Relay Firmware | from 1.23.0 before 1.23.21 from 1.24.0 before 1.24.8 from 1.25.0 before 1.25.3 |