← Database

CVE-2022-22512

CRITICAL CVSS: 9.8 Published: 2023-03-23 Modified: 2026-06-17

Description

Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.

Affected Platforms

Varta Element S2 FirmwareVarta Element S3 FirmwareVarta Element BackupVarta One Xl FirmwareVarta Element S1Varta One XlVarta Pulse FirmwareVarta One LVarta PulseVarta Element S1 Firmware

Weakness Type

CWE-798

References