CVE-2022-22512

Published: Mar 23, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD (Secondary)

Description

Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.

Affected (9)

Products: Varta: Element Backup Firmware, Element S1 Firmware, Element S2 Firmware, Element S3 Firmware, Element S4 Firmware, One L Firmware, One Xl Firmware, Pulse Firmware

Varta

8 products

Element Backup Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta Element Backup Firmware	Before f21000400

Running on/with	Platform Versions
Varta Element Backup	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta Element S1 Firmware	Before 2e.3.8.0

Running on/with	Platform Versions
Varta Element S1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta Element S2 Firmware	Before 2e.3.8.0

Running on/with	Platform Versions
Varta Element S2	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta Element S3 Firmware	Before 2e.3.8.0
Varta Element S3 Firmware	From 2e.4.0.0 to 2e.4.4.0

Running on/with	Platform Versions
Varta Element S3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta Element S4 Firmware	Before d21010400

Running on/with	Platform Versions
Varta Element S4	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta One L Firmware	Before 2e.3.8.0

Running on/with	Platform Versions
Varta One L	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta One Xl Firmware	Before 2e.3.8.0

Running on/with	Platform Versions
Varta One Xl	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Varta Pulse Firmware	Before c21010800

Running on/with	Platform Versions
Varta Pulse	All versions

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://cert.vde.com/en/advisories/VDE-2022-061/

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2022-061/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.