What is the CVSS score of CVE-2022-2005?

CVE-2022-2005 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.4%.

Is there a patch available for CVE-2022-2005?

Yes, a patch is available for CVE-2022-2005. Update the affected software to the latest version immediately.

C More Ea9 T6Cl Firmware CVE-2022-2005

HIGH

Cleartext Transmission of Sensitive Information (CWE-319)

2022-08-31 ics-cert@hq.dhs.gov

Information Disclosure C More Ea9 T6Cl Firmware C More Ea9 T6Cl R Firmware C More Ea9 T7Cl Firmware C More Ea9 T7Cl R Firmware C More Ea9 T8Cl Firmware C More Ea9 T10Cl Firmware C More Ea9 T10Wcl Firmware C More Ea9 T12Cl Firmware C More Ea9 T15Cl Firmware C More Ea9 T15Cl R Firmware C More Ea9 Rhmi Firmware C More Ea9 Pgmsw Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Aug 31, 2022 - 16:15 nvd

HIGH 7.5

DescriptionNVD

AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73;

AnalysisAI

AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-319. AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73; Affected products include: Automationdirect C-More Ea9-T6Cl Firmware, Automationdirect C-More Ea9-T6Cl-R Firmware, Automationdirect C-More Ea9-T7Cl Firmware, Automationdirect C-More Ea9-T7Cl-R Firmware, Automationdirect C-More Ea9-T8Cl Firmware. Version information: prior to 6.73.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.