Vulnerability in Octoprint
CVE-2022-2822
An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.
EPSS: 0.007 (49.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Octoprint
- Octoprint Octoprint/octoprint — versions unspecified
Weakness classification (CWE)
References
- security@huntr.dev (x_refsource_CONFIRM, Exploit, Patch, Third Party Advisory)
- security@huntr.dev (Patch, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-2822?
- CVE-2022-2822 is a high-severity vulnerability in Octoprint, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 7.5/10. Published 2022-08-15.
- How severe is CVE-2022-2822?
- High severity. CVSS v3 base score is 7.5 out of 10.