CVE-2022-4780
MEDIUMISOS Firmware 1.81-2.00 - Use of Hard-coded Credentials
Title source: llmDescription
ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators are not forced to change.
References (1)
Core 1
Core References
Release Notes, Vendor Advisory release-notes
https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/isos-release-notes/
Scores
CVSS v3
4.5
EPSS
0.0015
EPSS Percentile
4.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-798
Status
published
Products (1)
elvexys/isos_firmware
1.81 - 2.00
Published
Dec 29, 2022
Tracked Since
Feb 18, 2026