CVE-2022-27179 ICSA-22-104-03 Red Lion DA50N
Attackers with access to exported configuration files can obtain stored credentials, potentially compromising protected resources and other assets using the same passwords.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-27179?
CVE-2022-27179 is a medium-severity vulnerability in Red Lion DA50N, published on 20 Apr 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised.
Weakness: CWE-522
Which versions are affected by CVE-2022-27179?
It affects 1 product.
Products include Redlion Da50n Firmware.
How do I fix CVE-2022-27179?
No fix has been published for CVE-2022-27179 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-27179 being exploited?
There is no known exploitation of CVE-2022-27179 in the wild and no public exploit code.
Other vulnerabilities in Red Lion DA50N
Sources
Also known as GHSA-h63p-39p8-cjc7.