CVE-2022-0183 Vulnerability Details

  /     /     /  

CVE-2022-0183 Metadata Quick Info

CVE Published: 17/01/2022 | CVE Updated: 02/08/2024 | CVE Year: 2022
Source: jpcert | Vendor: KING JIM CO.,LTD. | Product: MIRUPASS
Status : PUBLISHED

---

CVE-2022-0183 Description

Missing encryption of sensitive data vulnerability in \'MIRUPASS\' PW10 firmware all versions and \'MIRUPASS\' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Missing encryption of sensitive data
Source: KING JIM CO.,LTD.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).