CVE-2022-2103

9.1 criticalEPSS 1.1%

Critical (9.1) in secheron sepcos control and protection relay firmware. EPSS 1.1% chance of exploitation in the next 30 days.

An attacker with weak credentials could access the TCP port via an open FTP port, allowing an attacker to read sensitive files and write to remotely executable directories.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWEs: CWE-522, CWE-284
Published: 2022-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

secheron:sepcos_control_and_protection_relay_firmware

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03
https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03

Check your stack JSON