CVE-2022-45291 - CVE House
Back to Database
Status published Unknown CVE-2022-45291

PWS Personal Weather Station Dashboard (PWS_Dashboard) LTS December 2020 (2012_lts)...

Vulnerability Description

PWS Personal Weather Station Dashboard (PWS_Dashboard) LTS December 2020 (2012_lts) allows remote code execution by injecting PHP code into settings.php. Attacks can use the PWS_printfile.php, PWS_frame_text.php, PWS_listfile.php, PWS_winter.php, and PWS_easyweathersetup.php endpoints. A contributing factor is a hardcoded login password of support, which is not documented. (This is not the same as the documented setup password, which is 12345.) The issue was fixed in late 2022.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-45291

Credits & Attribution

No credits recorded in the NVD database.

References

More from pwsdashboard

View All →
CVE-2025-47423
Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to...
Medium 5.8

Affected Vendor

pwsdashboard

View all reports →

Affected Software

personal weather station dashboard
Vulnerable Versions:
Unknown

Timeline

Official Publish: April 25th, 2023
Last Modified: February 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.