CVE-2022-0183 Information disclosure in MIRUPASS
An attacker with physical access can extract stored passwords from MIRUPASS devices due to missing encryption of sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-0183?
CVE-2022-0183 is a medium-severity vulnerability in KING JIM CO.,LTD. MIRUPASS, published on 17 Jan 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.
Weakness: CWE-311
Which versions are affected by CVE-2022-0183?
It affects 2 products.
Products include Kingjim Mirupass Pw10 Firmware, Kingjim Mirupass Pw20 Firmware.
How do I fix CVE-2022-0183?
No fix has been published for CVE-2022-0183 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-0183 being exploited?
There is no known exploitation of CVE-2022-0183 in the wild and no public exploit code.
Sources
Also known as GHSA-rpwp-rm9j-p52v.