CVE-2022-2104

Severity

CRITICAL

CVSS

9.9

EPSS

0.01019

Risk score

39.96

CISA KEV

PoC

Published

2022-06-24

Modified

2025-04-16

First seen

2026-08-07

Aliases

EUVD-2022-34392, GHSA-734C-X3WF-M9WH

Products

Secheron:SEPCOS Control and Protection Relay firmware package All versions <1.23.21

Sources

The www-data (Apache web server) account is configured to run sudo with no password for many commands (including /bin/sh and /bin/bash).