CVE-2022-47891— Admin password reset in NetMan 204
Possible ATT&CK Techniques 1AI
T1136.001 · Local AccountGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-47891
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Admin password reset in NetMan 204
Source: CVE Program / CVE List V5
Vulnerability Description
All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5
Vulnerability Title
RIELLO UPS NetMan 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RIELLO UPS NetMan是意大利RIELLO UPS公司的一款网络适配器。 RIELLO UPS NetMan 存在信任管理问题漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Riello UPS | Netman-204 | 0 ~ all versions | - |
II. Public POCs for CVE-2022-47891
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-47891
请登录查看更多情报信息。
Other References for CVE-2022-47891 (1)
Same Patch Batch · Riello UPS · 2023-10-03 · 3 CVEs total
| CVE-2022-47893 | 10.0 CRITICAL | NetMan 204 Remote Code Execution |
| CVE-2022-47892 | 5.3 MEDIUM | Information disclosure in NetMan 204 |
IV. Related Vulnerabilities
Same vendor: Riello UPS
Same weakness: CWE-798
- CVE-2026-76392
Use of Hard-coded Credentials in Container Connections in Sp - CVE-2026-71960
Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass - CVE-2026-74893
openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded - CVE-2026-74891
openssl_encrypt before 1.4.0 Hardcoded Database Credentials - CVE-2026-74892
openssl_encrypt before 1.4.0 Hardcoded Secret Key
V. Comments for CVE-2022-47891
No comments yet