CVE-2022-3485

criticalpriority · track · 0EPSS 0.010 · 62 %ileDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.99% (62nd) EPSS
CVSS 9.8 · critical
Is it mine?
6 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · ifm_psirt · nvd

EPSS · scored 2026-10-27

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedmoneo applianceifm_psirt

    The password-reset mechanism will be updated in a future version. When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups.

  • Fixedmoneo appliance <=1.9.3 installed on QHA210ifm_psirt

    The password-reset mechanism will be updated in a future version. When using automation components, make sure that no unauthorized access can take place. In addition, measures should be taken to ensure that the components do not have direct access to Internet resources and that they cannot be accessed from insecure networks. Use available security measures such as authentication and authorization groups.

  • Mitigationmoneo applianceifm_psirt

    The certificate is renewed by adjusting the hostname to an own customer-specific, so it does not contain the serial number.

  • Mitigationmoneo appliance <=1.9.3 installed on QHA210ifm_psirt

    The certificate is renewed by adjusting the hostname to an own customer-specific, so it does not contain the serial number.

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NVD / NIST USexploitability 3.9 · impact 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · info@cert.vde.comexploitability 3.9 · impact 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ifm PSIRT DE
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-640USCWE-640US
05

affected products (6)

Products and version ranges known to be affected.

06

advisories (1)

Vendor and ecosystem advisories describing this.

  • VDE-2022-050IFM: weak password recovery vulnerability in moneo appliance2022-12-12csaf · ifm_psirtDE

    An unauthenticated remote attacker could reset the administrator's password with information from the default, self-signed certificate.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdifm_psirtnvdNVDCVE.orgMITRE
published 2022-12-12modified 2026-06-17
09

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan