CVE-2022-40939 Information disclosure in n/a
Attackers can read the administrator account password from Secustation network devices, potentially leading to unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-40939?
CVE-2022-40939 is a medium-severity vulnerability in n/a, published on 8 Dec 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B20171107A, V2.3.4.1301-M20-TSA-B20150617A, V2.5.5.3116-S50-RXA-B20180502A, V2.5.5.3116-S50-SMA-B20190723A, V2.5.5.3116-S50-SMB-B20161012A, V2.3.4.2103-S50-NTD-B20170508B, V2.5.5.3116-S50-SMB-B20160601A, V2.5.5.2601-S50-TSA-B20151229A, and V2.5.5.3116-S50-SMA-B20170217.
Weakness: CWE-319
Which versions are affected by CVE-2022-40939?
It affects 1 product.
Products include Secu Secustation Firmware.
How do I fix CVE-2022-40939?
No fix has been published for CVE-2022-40939 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-40939 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-40939 exists.
Sources
Also known as GHSA-46x2-rxf4-75x5.