← All advisories

Critical severity9.9NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026

CVE-2022-2104

CVE-2022-2104

Description

The www-data (Apache web server) account is configured to run sudo with no password for many commands (including /bin/sh and /bin/bash).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Secheron/Sepcos Control And Protection Relay Firmware2 versions
cpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*range: >=1.23.0,<1.23.21
- (no CPE)range: All versions
Apache/web serverllm-create

Patches

Vulnerability mechanics

References

1

www.cisa.gov/uscert/ics/advisories/icsa-22-174-03nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

0

No linked articles in our index yet.