What is CVE-2022-40939?

CVE-2022-40939 is a medium-severity vulnerability in Secu Secustation, classified under Cleartext Transmission of Sensitive Information. CVSS score: 4.9/10. Published 2022-12-08.

How severe is CVE-2022-40939?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Secu Secustation

CVE-2022-40939

In certain Secustation products the administrator account password can be read. This affects V2.5.5.3116-S50-SMA-B20171107A, V2.3.4.1301-M20-TSA-B20150617A, V2.5.5.3116-S50-RXA-B20180502A, V2.5.5.3116-S50-SMA-B20190723A, V2.5.5.3116-S50-SMB-B20161012A, V2.3.4.2103-S50-NTD-B20170508B, V2.5.5.3116-S50-SMB-B20160601A, V2.5.5.2601-S50-TSA-B20151229A, and V2.5.5.3116-S50-SMA-B20170217.

EPSS: 0.004 (36.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Secu Secustation
Secu Secustation_firmware — versions 2.3.4.1301-m20-tsa-b20150617a, 2.3.4.2103-s50-ntd-b20170508b, 2.5.5.2601-s50-tsa-b20151229a
N/a — versions n/a

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2022-40939?: CVE-2022-40939 is a medium-severity vulnerability in Secu Secustation, classified under Cleartext Transmission of Sensitive Information. CVSS score: 4.9/10. Published 2022-12-08.
How severe is CVE-2022-40939?: Medium severity. CVSS v3 base score is 4.9 out of 10.