Vulnerability in Kingjim Mirupass Pw10
CVE-2022-0183
Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.
EPSS: 0.001 (1.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Kingjim Mirupass_pw10
- Kingjim Mirupass_pw10_firmware
- Kingjim Mirupass_pw20
- Kingjim Mirupass_pw20_firmware
- King Jim Co.,ltd. Mirupass — versions 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-0183?
- CVE-2022-0183 is a medium-severity vulnerability in Kingjim Mirupass Pw10, classified under Missing Encryption of Sensitive Data. CVSS score: 4.6/10. Published 2022-01-17.
- How severe is CVE-2022-0183?
- Medium severity. CVSS v3 base score is 4.6 out of 10.