CVE-2022-38355

5.5 mediumEPSS 0.4%

Medium (5.5) in daikinlatam. EPSS 0.4% chance of exploitation in the next 30 days.

Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2022-12-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

daikinlatam:svmpc1
daikinlatam:svmpc2

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-02
https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-02

Check your stack JSON