critical9.4
CVE-2022-2105
Client-side JavaScript controls may be bypassed to change user credentials and permissions without authentication, including a “root” user level meant only for…
Impact
Client-side JavaScript controls may be bypassed to change user credentials and permissions without authentication, including a “root” user level meant only for the vendor. Web server root level access allows for changing of safety critical parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secheron | Sepcos Control And Protection Relay Firmware | from 1.23.0 before 1.23.21 from 1.24.0 before 1.24.8 from 1.25.0 before 1.25.3 |