Vulnerability Details CVE-2022-29730
USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2022-29730
-
cpe:2.3:h:usr:usr-g800v2:-
-
cpe:2.3:h:usr:usr-g806:-
-
cpe:2.3:h:usr:usr-g807:-
-
cpe:2.3:h:usr:usr-g808:-
-
cpe:2.3:h:usr:usr-lg220-l:-
-
cpe:2.3:o:usr:usr-g800v2_firmware:1.0.36
-
cpe:2.3:o:usr:usr-g806_firmware:1.0.36
-
cpe:2.3:o:usr:usr-g807_firmware:1.0.36
-
cpe:2.3:o:usr:usr-g808_firmware:1.0.36
-
cpe:2.3:o:usr:usr-lg220-l_firmware:1.2.7