Vulnerability in Kingjim Mirupass Pw10
CVE-2022-0183
Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.001 (1.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 1.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- Kingjim Mirupass Pw10
- Kingjim Mirupass Pw10 Firmware
- Kingjim Mirupass Pw20
- Kingjim Mirupass Pw20 Firmware
- King Jim Co.,ltd. Mirupass — versions 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions
Weakness classification (CWE)
References
- www.kingjim.co.jp/download/security/ (Vendor Advisory)
- jvn.jp/en/jp/JVN19826500/index.html (Third Party Advisory)
Frequently asked questions
- What is CVE-2022-0183?
- CVE-2022-0183 is a medium-severity vulnerability in Kingjim Mirupass Pw10, classified under Missing Encryption of Sensitive Data. CVSS score: 4.6/10. Published 2022-01-17.
- How severe is CVE-2022-0183?
- Medium severity. CVSS v3 base score is 4.6 out of 10.