cnvd - cnvd-2022-64990

cnvd-2022-64990

Vulnerability from cnvd

Title: Secheron SEPCOS Control and Protection Relay弱密码漏洞

Description:

Secheron SEPCOS Control and Protection Relay是Secheron的继电器。控制和保护您的直流面板和接触线免受短路和其他电气故障的影响，并受益于增强的通信功能。

Secheron SEPCOS Control and Protection Relay存在弱密码漏洞，远程攻击者可利用该漏洞通过开放的TCP端口轻松获得操作系统超级用户权限以进行SSH。

Severity: 高

Patch Name: Secheron SEPCOS Control and Protection Relay弱密码漏洞的补丁

Patch Description:

Secheron SEPCOS Control and Protection Relay是Secheron的继电器。控制和保护您的直流面板和接触线免受短路和其他电气故障的影响，并受益于增强的通信功能。

Secheron SEPCOS Control and Protection Relay存在弱密码漏洞，远程攻击者可利用该漏洞通过开放的TCP端口轻松获得操作系统超级用户权限以进行SSH。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://support.secheron.com/

Reference: https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

Impacted products

Name
['Secheron SEPCOS Control and Protection Relay <1.23.21', 'Secheron SEPCOS Control and Protection Relay <1.24.8', 'Secheron SEPCOS Control and Protection Relay <1.25.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-1668",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-1668"
    }
  },
  "description": "Secheron SEPCOS Control and Protection Relay\u662fSecheron\u7684\u7ee7\u7535\u5668\u3002\u63a7\u5236\u548c\u4fdd\u62a4\u60a8\u7684\u76f4\u6d41\u9762\u677f\u548c\u63a5\u89e6\u7ebf\u514d\u53d7\u77ed\u8def\u548c\u5176\u4ed6\u7535\u6c14\u6545\u969c\u7684\u5f71\u54cd\uff0c\u5e76\u53d7\u76ca\u4e8e\u589e\u5f3a\u7684\u901a\u4fe1\u529f\u80fd\u3002\n\nSecheron SEPCOS Control and Protection Relay\u5b58\u5728\u5f31\u5bc6\u7801\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5f00\u653e\u7684TCP\u7aef\u53e3\u8f7b\u677e\u83b7\u5f97\u64cd\u4f5c\u7cfb\u7edf\u8d85\u7ea7\u7528\u6237\u6743\u9650\u4ee5\u8fdb\u884cSSH\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.secheron.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-64990",
  "openTime": "2022-09-22",
  "patchDescription": "Secheron SEPCOS Control and Protection Relay\u662fSecheron\u7684\u7ee7\u7535\u5668\u3002\u63a7\u5236\u548c\u4fdd\u62a4\u60a8\u7684\u76f4\u6d41\u9762\u677f\u548c\u63a5\u89e6\u7ebf\u514d\u53d7\u77ed\u8def\u548c\u5176\u4ed6\u7535\u6c14\u6545\u969c\u7684\u5f71\u54cd\uff0c\u5e76\u53d7\u76ca\u4e8e\u589e\u5f3a\u7684\u901a\u4fe1\u529f\u80fd\u3002\r\n\r\nSecheron SEPCOS Control and Protection Relay\u5b58\u5728\u5f31\u5bc6\u7801\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5f00\u653e\u7684TCP\u7aef\u53e3\u8f7b\u677e\u83b7\u5f97\u64cd\u4f5c\u7cfb\u7edf\u8d85\u7ea7\u7528\u6237\u6743\u9650\u4ee5\u8fdb\u884cSSH\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Secheron SEPCOS Control and Protection Relay\u5f31\u5bc6\u7801\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Secheron SEPCOS Control and Protection Relay \u003c1.23.21",
      "Secheron SEPCOS Control and Protection Relay  \u003c1.24.8",
      "Secheron SEPCOS Control and Protection Relay  \u003c1.25.3"
    ]
  },
  "referenceLink": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03",
  "serverity": "\u9ad8",
  "submitTime": "2022-06-27",
  "title": "Secheron SEPCOS Control and Protection Relay\u5f31\u5bc6\u7801\u6f0f\u6d1e"
}

CVE-2022-1668 (GCVE-0-2022-1668)

Vulnerability from cvelistv5

Published

2022-06-24 15:00

Modified

2025-04-16 16:16

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-521 - Weak Password Requirements

Summary

Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH.

References

▼	URL	Tags
	https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Secheron	SEPCOS Control and Protection Relay firmware package	Version: All versions < 1.23.21

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:10:03.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-1668",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T15:54:13.554030Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-16T16:16:08.809Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SEPCOS Control and Protection Relay firmware package",
          "vendor": "Secheron",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.24.8",
                  "status": "unaffected"
                },
                {
                  "at": "1.25.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.23.21",
              "status": "affected",
              "version": "All versions",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Anthony Candarini of AECOM, Clark Bradley of Elliott Davis, Mike Curnow of AECOM, and Balakrishna Subramoney of SAM Analytic Solutions reported these vulnerabilities to CISA."
        }
      ],
      "datePublic": "2022-06-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-521",
              "description": "CWE-521 Weak Password Requirements",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-06-24T15:00:32.000Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Secheron recommends updating its software to the latest version:\n\nSEPCOS Single Package firmware (1.23.xx feature level): Update to 1.23.22 or higher version\nSEPCOS Single Package firmware (1.24.xx feature level): Update to 1.24.8 or higher version\nSEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version"
        }
      ],
      "source": {
        "advisory": "ICSA-22-174-03",
        "discovery": "EXTERNAL"
      },
      "title": "Secheron SEPCOS Control and Protection Relay",
      "workarounds": [
        {
          "lang": "en",
          "value": "Additional workarounds are suggested to help reduce the risk:\n\nConfigure the network such that PLC communications are strictly limited to only the devices required to perform its functions.\nLimit remote access and close Ports 80 and 443 at the switch level.\nOnly use approved devices to connect to the PLCs. Do not connect personal peripherals (USB sticks, hotspots) to approved devices.\nCheck device logs during periodic maintenance for unauthorized changes or access."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "DATE_PUBLIC": "2022-06-23T17:01:00.000Z",
          "ID": "CVE-2022-1668",
          "STATE": "PUBLIC",
          "TITLE": "Secheron SEPCOS Control and Protection Relay"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SEPCOS Control and Protection Relay firmware package",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "All versions",
                            "version_value": "1.23.21"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "All versions",
                            "version_value": "1.24.8"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "All versions",
                            "version_value": "1.25.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Secheron"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Anthony Candarini of AECOM, Clark Bradley of Elliott Davis, Mike Curnow of AECOM, and Balakrishna Subramoney of SAM Analytic Solutions reported these vulnerabilities to CISA."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-521 Weak Password Requirements"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03",
              "refsource": "MISC",
              "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Secheron recommends updating its software to the latest version:\n\nSEPCOS Single Package firmware (1.23.xx feature level): Update to 1.23.22 or higher version\nSEPCOS Single Package firmware (1.24.xx feature level): Update to 1.24.8 or higher version\nSEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version"
          }
        ],
        "source": {
          "advisory": "ICSA-22-174-03",
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Additional workarounds are suggested to help reduce the risk:\n\nConfigure the network such that PLC communications are strictly limited to only the devices required to perform its functions.\nLimit remote access and close Ports 80 and 443 at the switch level.\nOnly use approved devices to connect to the PLCs. Do not connect personal peripherals (USB sticks, hotspots) to approved devices.\nCheck device logs during periodic maintenance for unauthorized changes or access."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2022-1668",
    "datePublished": "2022-06-24T15:00:32.930Z",
    "dateReserved": "2022-05-10T00:00:00.000Z",
    "dateUpdated": "2025-04-16T16:16:08.809Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted