NetSight
critical9.8

CVE-2022-3485

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and…

Impact

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

Affected products

VendorProductAffected versions
IfmMoneo Qha210 Firmware
through 1.9.3
IfmMoneo Qha200 Firmware
through 1.9.3

Weakness classification

References