CVE-2022-2197

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication scheme and perform administrative operations.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
ExemysRME1-AI firmware>= All versions, <= 2.1.6

References

Timeline

Published
Jun 30, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-219706.1Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-219717.8Windows Runtime Remote Code Execution VulnerabilityCVE-2022-219728.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-219735.5Windows Media Center Update Denial of Service VulnerabilityCVE-2022-219747.8Roaming Security Rights Management Services Remote Code Execution VulnerabilityCVE-2022-219754.7Windows Hyper-V Denial of Service VulnerabilityCVE-2022-219773.3Media Foundation Information Disclosure VulnerabilityCVE-2022-219788.2Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-219794.8Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2022-21984.3The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displCVE-2022-219808.0Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-219817.8Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-2197: Critical severity, CVSS 9.8 | Vulnix