CVE-2022-1668

9.8 criticalEPSS 2.3%

Critical (9.8) in secheron sepcos control and protection relay firmware. EPSS 2.3% chance of exploitation in the next 30 days.

Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-521
Published: 2022-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19