What is CVE-2022-1039?

CVE-2022-1039 is a critical-severity vulnerability in Red Lion Da50n, classified under Weak Password Requirements. CVSS score: 9.6/10. Published 2022-04-20.

How severe is CVE-2022-1039?

Critical severity. CVSS v3 base score is 9.6 out of 10.

Vulnerability in Red Lion Da50n

CVE-2022-1039

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password.

EPSS: 0.012 (64.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-521 — Weak Password Requirements

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-1039?: CVE-2022-1039 is a critical-severity vulnerability in Red Lion Da50n, classified under Weak Password Requirements. CVSS score: 9.6/10. Published 2022-04-20.
How severe is CVE-2022-1039?: Critical severity. CVSS v3 base score is 9.6 out of 10.