ifm

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

ifm records in CISA KEV

No ifm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Moneo Qha200 Firmware 1 record MEDIUM Moneo Qha210 Firmware 1 record MEDIUM

Records

1 record in Moneo Qha210 Firmware · all components

TI-2022-03217 CVE-2022-3485 · GHSA-xjvv-99gp-jgrm

Weak Password Recovery in ifm moneo appliance

MEDIUM 51

In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00989 Published 2022-12-12 No fix listed CWE-640

Open these records in search →

Critical	4
High	3
Medium	0
Low	0
No CVSS	0