4.6

CVE-2022-0183

Missing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and 'MIRUPASS' PW20 firmware all versions allows an attacker who can physically access the device to obtain the stored passwords.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kingjim ≫ Mirupass Pw10 Firmware Version -
   Kingjim ≫ Mirupass Pw10 Version -
Kingjim ≫ Mirupass Pw20 Firmware Version -
   Kingjim ≫ Mirupass Pw20 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.014
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-311 Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

https://jvn.jp/en/jp/JVN19826500/index.html
Third Party Advisory
https://www.kingjim.co.jp/download/security/#mirupass
Vendor Advisory