CVE-2022-3010 - CVE House
Back to Database
Status published High CVE-2022-3010

Predictable SSH credentials in Priva TopControl Suite

Vulnerability Description

The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-3010

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • A researcher at NorthWave reported this vulnerability to DIVD.
  • Victor Pasman (DIVD)

References

Affected Vendor

Affected Software

TopControl Suite - Bacnet, TopControl Suite - Blue ID, TopControl Suite - Compass, TopControl Suite - Connect, TopControl Suite - TPC
Vulnerable Versions:
All versions prior to 8.7.8.0

Timeline

Official Publish: January 2nd, 2024
Last Modified: June 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-1391

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.