Back to Database
Status published
High
CVE-2022-47891
Admin password reset in NetMan 204
Vulnerability Description
All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-47891
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Joel Gámez Molina (@JoelGMSec)
More from Riello UPS
View All →CVE-2025-71318
NetMan 204 Missing Authentication for Administrative Functions
Critical
9.3
CVE-2025-71317
NetMan 204 Hard-coded Backdoor Credentials
Critical
9.3
CVE-2022-47893
NetMan 204 Remote Code Execution
Critical
10
CVE-2022-47892
Information disclosure in NetMan 204
Medium
5.3
CVE-2022-3372
Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204
High
8.8
Affected Vendor
Riello UPS
View all reports →Affected Software
Netman-204
Vulnerable Versions:
0
Timeline
Official Publish:
October 3rd, 2023
Last Modified:
September 6th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H