CVE-2022-3010highCWE-1391

CVE-2022-3010: high-severity vulnerability in Priva TopControl Suite - Bacnet

Predictable SSH credentials in Priva TopControl Suite

Published · Updated

Follow this CVE+ Monitor TopControl Suite - Bacnet+ Monitor TopControl Suite - Blue ID

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.6%
The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Priva · TopControl Suite - BacnetPriva · TopControl Suite - Blue IDPriva · TopControl Suite - CompassPriva · TopControl Suite - ConnectPriva · TopControl Suite - TPC