high8.8
CVE-2022-30036
MA Lighting grandMA2 Light has a password of root for the root account.
Impact
MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product was designed for isolated networks. Also, the successor product, grandMA3, is not affected by this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Malighting | Grandma2 Light Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://parzival.sh/posts/Pwning-a-Lighting-Console-in-a-Few-Minutes/
- https://www.malighting.com/product-archive/product/grandma2-light-120112/
- https://parzival.sh/posts/Pwning-a-Lighting-Console-in-a-Few-Minutes/
- https://www.malighting.com/product-archive/product/grandma2-light-120112/