CVE-2022-2105
mediumpriority · track · 36EPSS 0.011 · 66 %ileEURUUSEPSS · scored 2026-10-26
Client-side JavaScript controls may be bypassed to change user credentials and permissions without authentication, including a “root” user level meant only for the vendor. Web server root level access allows for changing of safety critical parameters.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSEPCOS Single Package firmware (1.23.xx feature level)cisa_csaf_ot
SEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version
- FixedSEPCOS Single Package firmware (1.24.xx feature level)cisa_csaf_ot
SEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version
- FixedSEPCOS Single Package firmware (1.25.xx feature level)cisa_csaf_ot
SEPCOS Single Package firmware (1.25.xx feature level): Update to 1.25.3 or higher version
- MitigationSEPCOS Single Package firmware (1.23.xx feature level)cisa_csaf_ot
Check device logs during periodic maintenance for unauthorized changes or access.
- MitigationSEPCOS Single Package firmware (1.24.xx feature level)cisa_csaf_ot
Check device logs during periodic maintenance for unauthorized changes or access.
- MitigationSEPCOS Single Package firmware (1.25.xx feature level)cisa_csaf_ot
Check device logs during periodic maintenance for unauthorized changes or access.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.4–9.4
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (13)
Products and version ranges known to be affected.
- secheron sepcos control and protection relay firmware1.23.0 → 1.23.21nvdUScpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*
- secheron sepcos control and protection relay firmware1.24.0 → 1.24.8nvdUScpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*
- secheron sepcos control and protection relay firmware1.25.0 → 1.25.3nvdUScpe:2.3:o:secheron:sepcos_control_and_protection_relay_firmware:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-22-174-03Secheron SEPCOS Control and Protection Relay2022-06-23icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to obtain full, root access over the device in multiple ways. Initial footholds through S-Web interface software vulnerabilities could allow an attacker to obtain a level of control over the PLC's functions only the vendor typically has access to. This includes the ability to reset the PLC, upload arbitrary files / execute code, and change parameters for protective functions that can pose a range of availability and safety risks to the power system the PLC is configured to control (based on the specific implementation). Further exploitation of the underlying PLC misconfigurations can allow an attacker to trivially escalate privileges to OS root through either the S-Web vulnerabilities or FTP and SSH misconfigurations.
also known as (5)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2022-2105/cnnvd
- https://support.secheron.com/Patchcnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-174-03cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.3073cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03cnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03enisa_euvd
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03MitigationThird Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan