High severity7.5NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026
CVE-2022-1667
CVE-2022-1667
Description
Client-side JavaScript controls may be bypassed by directly running a JS function to reboot the PLC (e.g., from the browser console) or by loading the corresponding, browser accessible PHP script
Affected products
3- Secheron/SEPCOS Control and Protection Relay firmware packagev5Range: All versions
- cpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*Range: >=1.23.0,<1.23.21
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsa-22-174-03nvdMitigationThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.