Medium severity6.5NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026
CVE-2022-1666
CVE-2022-1666
Description
The default password for the web application’s root user (the vendor’s private account) was weak and the MD5 hash was used to crack the password using a widely available open-source tool.
Affected products
2cpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*range: >=1.23.0,<1.23.21
- (no CPE)range: All versions
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsa-22-174-03nvdMitigationThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.