CVE-2022-42176

HIGH

PCTechSoft PCSecure V5.0.8.xw - Use of Hard-coded Credentials

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-42176. PoCs published by soy-oreocato.

AI-analyzed exploit summary This repository documents CVE-2022-42176, a hard-coded credentials vulnerability in PCSecure V5.0.8.xw, where admin credentials are stored in plain text within a configuration file. The PoC outlines manual exploitation steps but does not include executable code.

Description

In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access.

Exploits (1)

nomisec WRITEUP 1 stars
by soy-oreocato · poc
https://github.com/soy-oreocato/CVE-2022-42176

This repository documents CVE-2022-42176, a hard-coded credentials vulnerability in PCSecure V5.0.8.xw, where admin credentials are stored in plain text within a configuration file. The PoC outlines manual exploitation steps but does not include executable code.

Classification
Writeup 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: PCSecure V5.0.8.xw
No auth needed
Prerequisites: Local access to the system · Ability to read the configuration file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0032
EPSS Percentile 24.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-798
Status published
Products (1)
pctechsoft/pcsecure 5.0.8.xw
Published Oct 20, 2022
Tracked Since Feb 18, 2026