Vulnerability in Daikin Svmpc1
CVE-2022-38355
Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.
EPSS: 0.004 (33.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Daikin Svmpc1 — versions 0
- Daikin Svmpc2 — versions 0
- Daikinlatam Svmpc1
- Daikinlatam Svmpc2
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-38355?
- CVE-2022-38355 is a high-severity vulnerability in Daikin Svmpc1, classified under Improper Access Control. CVSS score: 7.5/10. Published 2022-12-13.
- How severe is CVE-2022-38355?
- High severity. CVSS v3 base score is 7.5 out of 10.