critical9.8
CVE-2022-22512
Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the W…
Impact
Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Varta | Element Backup Firmware | before f21000400 |
| Varta | Element S1 Firmware | before 2e.3.8.0 |
| Varta | Element S2 Firmware | before 2e.3.8.0 |
| Varta | Element S3 Firmware | before 2e.3.8.0 from 2e.4.0.0 before 2e.4.4.0 |
| Varta | Element S4 Firmware | before d21010400 |
| Varta | One L Firmware | before 2e.3.8.0 |
| Varta | One Xl Firmware | before 2e.3.8.0 |
| Varta | Pulse Firmware | before c21010800 |