CVE-2022-2104

highpriority · track · 39EPSS 0.011 · 66 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.13% (66th) EPSS

CVSS 7.5 · high

Is it mine?

13 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

The www-data (Apache web server) account is configured to run sudo with no password for many commands (including /bin/sh and /bin/bash).

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSEPCOS Single Package firmware (1.23.xx feature level)cisa_csaf_ot
SEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version
FixedSEPCOS Single Package firmware (1.24.xx feature level)cisa_csaf_ot
SEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version
FixedSEPCOS Single Package firmware (1.25.xx feature level)cisa_csaf_ot
SEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version
MitigationSEPCOS Single Package firmware (1.23.xx feature level)cisa_csaf_ot
Check device logs during periodic maintenance for unauthorized changes or access.
MitigationSEPCOS Single Package firmware (1.24.xx feature level)cisa_csaf_ot
Check device logs during periodic maintenance for unauthorized changes or access.
MitigationSEPCOS Single Package firmware (1.25.xx feature level)cisa_csaf_ot
Check device logs during periodic maintenance for unauthorized changes or access.

cvss

Technical severity, 0–10. One row per scoring source.

9.9

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.9

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.09.9criticalCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · CISA US

v3.19.9criticalAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.9criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.9criticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USexploitability 3.1 · impact 6

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-269USCWE-269USCWE-269US

affected products (13)

Products and version ranges known to be affected.

SEPCOS Single Package firmware (1.23.xx feature level): All versions prior to 1.23.21all versionscisa_csaf_otUS
SEPCOS Single Package firmware (1.24.xx feature level): All versions prior to 1.24.8all versionscisa_csaf_otUS
SEPCOS Single Package firmware (1.25.xx feature level): All versions prior to 1.25.3all versionscisa_csaf_otUS
Secheron SEPCOS Single Package firmware (1.23.xx feature level)< 1.23.21cisa_csaf_otUS
Secheron SEPCOS Single Package firmware (1.24.xx feature level)< 1.24.8cisa_csaf_otUS
Secheron SEPCOS Single Package firmware (1.25.xx feature level)< 1.25.3cisa_csaf_otUS
Secheron SEPCOS Control and Protection Relay firmware packageAll versions → 1.23.21enisa_euvdEU
Secheron SEPCOS Single Package≤ 1.25.3fstec_bduRU
Secheron SEPCOS Single Package≤ 1.24.8fstec_bduRU
Secheron SEPCOS Single Package≤ 1.23.22fstec_bduRU
secheron sepcos control and protection relay firmware1.23.0 → 1.23.21nvdUScpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*
secheron sepcos control and protection relay firmware1.24.0 → 1.24.8nvdUScpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*
secheron sepcos control and protection relay firmware1.25.0 → 1.25.3nvdUScpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-22-174-03Secheron SEPCOS Control and Protection Relay2022-06-23icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to obtain full, root access over the device in multiple ways. Initial footholds through S-Web interface software vulnerabilities could allow an attacker to obtain a level of control over the PLC's functions only the vendor typically has access to. This includes the ability to reset the PLC, upload arbitrary files / execute code, and change parameters for protective functions that can pose a range of availability and safety risks to the power system the PLC is configured to control (based on the specific implementation). Further exploitation of the underlying PLC misconfigurations can allow an attacker to trivially escalate privileges to OS root through either the S-Web vulnerabilities or FTP and SSH misconfigurations.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd NVD CVE.org MITRE

published 2022-06-24modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan