Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-3485

Weak Password Recovery in ifm moneo appliance

Description

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ifm moneo appliance

Default version status: unaffected

  • 0 to ≤ 1.9.3affected

ifm moneo appliance

Default version status: unaffected

  • 0 to ≤ 1.9.3affected

References