CVE-2022-1039 - CVE House
Back to Database
Status published Critical CVE-2022-1039

ICSA-22-104-03 Red Lion DA50N

Vulnerability Description

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1039

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ron Brash of aDolus Technology Inc. reported these vulnerabilities to CISA.

References

More from Red Lion

View All →
CVE-2023-5719
Red Lion Crimson Improper Neutralization of Null Byte or NUL Character
High 8.8
CVE-2022-27179
ICSA-22-104-03 Red Lion DA50N
Medium 4.6
CVE-2022-26516
ICSA-22-104-03 Red Lion DA50N
High 8.4

Affected Vendor

Affected Software

DA50N
Vulnerable Versions:
All

Timeline

Official Publish: April 20th, 2022
Last Modified: April 16th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-521

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.